<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="5995">
<package pkgid="3fc38d6a09627f194cb932a4b038910609a03faff897bcb91d5b0480856e0d8b" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="ed8a696492dfadb62a8fbfb9037a21aa94770536df040c091dccbc0c038ae59e" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="56fd28862ba77cd9b5be6e21c105b788823bc6310f39cdf9dd635facf630d251" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="0dc1c00d2fb564f7de095da9612d151d5fa0988e8a57f735cbabe016fa4f3498" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="8d56403fbf56038278e894819873b5243bac9669bf1cf6a28ebec9030e9e89f4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="5adffce5976cbe8451b58d88e28622d96d5038b45e044d074b1da7c57dac5325" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="20ea7fc7ed82381ae5a5e21c1804d99b88306c63a635a1f5cd26c17ac1ff2a05" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="b6b8952aee701bb6f493d70b6aa2f77746da0a39b0cbe40a6c120b8de13e7337" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="e542fc256ba709a7e6e4bcb7af6117e673bc30a7f5ad835ef52a0500feebff47" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="cbd496448c3988e7b687f25ee94954126de88e616e9685352dd9304c60916384" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="767cdca8ad1e28ea1837ffa42902f2188bbd73d31e852bbf06d0602647102542" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="75269154c7e046223d5834d0d43524117c2dcb5704e8ab2fa1d22eaa754c65ac" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="99a67d7f39ff25517361c23cc68cf9b3314976cae517e7e257d9d591c1f07207" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="66d4fede02a2d0f20fde9b773a33bcd9626af4c5ac40edd39df5acebce938f78" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="7fb2176d883c63a990f0de46c37d7a1902da82dd99ad026c0e0b7f1491ba78b8" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="219581665a0117e5a84f1ef90a6082d1790bc016e2f2b6bde835bbd0d821be9b" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="468d45bb34114c1a1fd6a3d17394e3a846a1f08e8adf823ed78df474fa59d436" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="34324bceba15dff47b43585fb30c8e94670963c901faa82b208a10abb8baa09c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="dcae16ab18d68314b50e66f9f8f4e4c8ce12026edde734b5ec37d1f10465d190" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="6c605ea88a086a0a722dde5391c3bf6c95dec2f78935a3efe91b6e50d22e90a8" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="2ef7de6341a7edb0950f77bdd43e60297682bd5f1c13d31bf41f279d6bff9980" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="b064724f52fea1bf907e4e7ef5f943a2c1803b3e71ef800fd9124f2094123092" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="cgrobertson@suse.com" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="cgrobertson@suse.com" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="cgrobertson@suse.com" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="cgrobertson@suse.com" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="cgrobertson@suse.com" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="cgrobertson@suse.com" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="cee756064649749e887bd66b66d222043869ba89b9828013bfc4976418f7afb6" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="6f94d38d831817bb5e74e41b8ec64d129acf9007f073dbfc7029a36a1a1fba60" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="feeee8505c068e0f23034d3d9a4c4ccb1b8353456b7c279d47fb0d061fbd10e4" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="71cd5844e27c01a670403730b8867ce3b6437afb623f25ce5c3690d07c77987b" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="3d2967d79c889d521c89c60ff9a116116fba3b48bdce3e17612e2c6ad57de068" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="506e82734537e46473461e0a3af99ffa1d0da2ac3b34426bc3f8d807c37bcf9a" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="c2fd129285f53c98b329907b167c1c52ead839819bb1479fac0fe81b0a1c5e0f" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="fe53ea33b5638f966d72d267daf82d48edf635bf95a7a38524467d3ef7d739b6" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="f26ffaffd86ee320197d397459525f41371af0c9a690dca353b7e123af39d7a9" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="7f5d31cf9aa970da3494de95aad3c2ef6ece38c58856656e7f5a433c59e6768a" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="ae8e7320c5a77a1c7c946944c184c151c4d333e25484959c3901830b427206d6" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="9ec92d753242bab8c24b14d303d48f271ed5779050b7ed5255a210c72962161d" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="8a1cb50328ba4fefa4c35aada19f278543fe979e8aadf635efb7aea7cdac55fb" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="3cfe350fdb87c6bea431a35b14baebc633ef2bcd3507fcf6e314de83f63b1ef2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="f5fdeb91ac8bf0e5e3f91f35f7b864a9a9a4520aabb4426a5dc6cfc565c77db4" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="4023a53e8612cfaa1c096cfc9ac6164d94c524f6a2f66a4fc24b26cb35045724" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="340853a4eb4701dbc5e74dc16895b96310fbd9fc8e63d765f1cf1e5b5dbd3740" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="e457f5ef01f89a1f022921baac4a1d35230c57ea32ec8d7978563110f5cfffa2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="b384ee28e49f0b8977a71c2c199f7f8fb56174be9b16dfc14616d6b14e8f95cc" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="e9355e8410a074d2aa49336754cf80cfc7b727268dbb46bc59830ee0320d102a" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="f91eb9225dd23e696c014c5c6f6c5be73e58d5659d6eb606af5efe1914cf699c" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="e6689b71b75d1902cc21df80ae874b467bfeba0aae742d57672000dcc166cbf6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="ddc034e1387ec0f3a274961766b00d1afbc98e51dea288a48ce9edae104b8556" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="65a861a2562c0ae29afda9d144a7ab81b127641e9c89565ec721aebbc156f51d" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="1c6acfbd5a3c17788616ef5f0153198fb5576e99cbcf3f51eeb0ca73521930a0" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="74c9fd975001d30cd785bd68ef77c700ea5a31a803d75cb3ac2afae51404a9de" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.30.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="cgrobertson@suse.com" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="0e662d9232cf0edc80b3770666c4f5af374e070414b07e112aa568284f7cbc5b" name="POS_Image-Graphical7" arch="noarch">
  <version epoch="0" ver="0.1.1620138994.d7f39a0" rel="1.18.1"/>
  <changelog author="nadvornik@suse.com" date="1567166400">- New package</changelog>
  <changelog author="nadvornik@suse.com" date="1571745600">- Comment out plymouth-plugin-label-ft which is not
  available on SLE15 SP1
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="nadvornik@suse.com" date="1575288000">- Enable install-local-bootloader.service (bsc#1158032)
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="oholecek@suse.com" date="1579867200">- Add xfsprogs to the image description to make XFS available
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="nadvornik@suse.com" date="1585569600">- Enable Secure Boot by default
- Update to version 0.1.1585755274.cacc6dc</changelog>
  <changelog author="oholecek@suse.com" date="1595505600">- Add plymouth-plugin-label-ft package to all *7 templates and set
  them to be of SLE15SP2 version
- Add optional dracut-wireless comment section and move wpa_suplicant
  there
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1611921600">- Use linuxefi only on x86</changelog>
  <changelog author="nadvornik@suse.com" date="1613995200">- Update install-local-bootloader.service for recent saltboot
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1618401600">- Use absolute path in bootloader service
- Update to version 0.1.1620138994.d7f39a0</changelog>
</package>
<package pkgid="6c32c5b9ae232924fcad4e3651a752f00a3c6f7f3e9cba0bd7cfadbd2dafd118" name="POS_Image-Graphical7" arch="src">
  <version epoch="0" ver="0.1.1620138994.d7f39a0" rel="1.18.1"/>
  <changelog author="nadvornik@suse.com" date="1567166400">- New package</changelog>
  <changelog author="nadvornik@suse.com" date="1571745600">- Comment out plymouth-plugin-label-ft which is not
  available on SLE15 SP1
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="nadvornik@suse.com" date="1575288000">- Enable install-local-bootloader.service (bsc#1158032)
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="oholecek@suse.com" date="1579867200">- Add xfsprogs to the image description to make XFS available
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="nadvornik@suse.com" date="1585569600">- Enable Secure Boot by default
- Update to version 0.1.1585755274.cacc6dc</changelog>
  <changelog author="oholecek@suse.com" date="1595505600">- Add plymouth-plugin-label-ft package to all *7 templates and set
  them to be of SLE15SP2 version
- Add optional dracut-wireless comment section and move wpa_suplicant
  there
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1611921600">- Use linuxefi only on x86</changelog>
  <changelog author="nadvornik@suse.com" date="1613995200">- Update install-local-bootloader.service for recent saltboot
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1618401600">- Use absolute path in bootloader service
- Update to version 0.1.1620138994.d7f39a0</changelog>
</package>
<package pkgid="da424b0de121648cd4edade09f00f9ed51ac418b8ea5735ac319bb83d96ee5f3" name="POS_Image-JeOS7" arch="noarch">
  <version epoch="0" ver="0.1.1620138994.d7f39a0" rel="1.18.1"/>
  <changelog author="nadvornik@suse.com" date="1567166400">- New package</changelog>
  <changelog author="nadvornik@suse.com" date="1571745600">- Comment out plymouth-plugin-label-ft which is not
  available on SLE15 SP1
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="nadvornik@suse.com" date="1575288000">- Enable install-local-bootloader.service (bsc#1158032)
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="oholecek@suse.com" date="1579867200">- Add xfsprogs to the image description to make XFS available
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="nadvornik@suse.com" date="1585569600">- Enable Secure Boot by default
- Update to version 0.1.1585755274.cacc6dc</changelog>
  <changelog author="oholecek@suse.com" date="1595505600">- Add plymouth-plugin-label-ft package to all *7 templates and set
  them to be of SLE15SP2 version
- Add optional dracut-wireless comment section and move wpa_suplicant
  there
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1611921600">- Use linuxefi only on x86</changelog>
  <changelog author="nadvornik@suse.com" date="1613995200">- Update install-local-bootloader.service for recent saltboot
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1618401600">- Use absolute path in bootloader service
- Update to version 0.1.1620138994.d7f39a0</changelog>
</package>
<package pkgid="7ce49fd4b33dc2d83f8988abda4f7f7b003cfb49a6c3c6123e5e4d5e1575010b" name="POS_Image-JeOS7" arch="src">
  <version epoch="0" ver="0.1.1620138994.d7f39a0" rel="1.18.1"/>
  <changelog author="nadvornik@suse.com" date="1567166400">- New package</changelog>
  <changelog author="nadvornik@suse.com" date="1571745600">- Comment out plymouth-plugin-label-ft which is not
  available on SLE15 SP1
- Update to version 0.1.1573133286.06608d5</changelog>
  <changelog author="nadvornik@suse.com" date="1575288000">- Enable install-local-bootloader.service (bsc#1158032)
- Update to version 0.1.1579102150.4716559</changelog>
  <changelog author="oholecek@suse.com" date="1579867200">- Add xfsprogs to the image description to make XFS available
- Update to version 0.1.1580471316.1839544</changelog>
  <changelog author="nadvornik@suse.com" date="1585569600">- Enable Secure Boot by default
- Update to version 0.1.1585755274.cacc6dc</changelog>
  <changelog author="oholecek@suse.com" date="1595505600">- Add plymouth-plugin-label-ft package to all *7 templates and set
  them to be of SLE15SP2 version
- Add optional dracut-wireless comment section and move wpa_suplicant
  there
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1611921600">- Use linuxefi only on x86</changelog>
  <changelog author="nadvornik@suse.com" date="1613995200">- Update install-local-bootloader.service for recent saltboot
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1618401600">- Use absolute path in bootloader service
- Update to version 0.1.1620138994.d7f39a0</changelog>
</package>
<package pkgid="31bb9020fc1b8b49846d1baab200f2c91d7c3c01733aab4d40d9d77630928d9a" name="SUSEConnect" arch="aarch64">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="coolo@suse.com" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="giovanni.filippetti@suse.com" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="c14569ff6ccf20cc4349779a18d972ce0126deb8b8eba86d4eb5edc90a596ddb" name="SUSEConnect" arch="ppc64le">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="coolo@suse.com" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="giovanni.filippetti@suse.com" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="96b29c0ea068eb2a2bc7916161a722ea2ffcda191fff7ccd5ee5aa3089ed6eb1" name="SUSEConnect" arch="s390x">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="coolo@suse.com" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="giovanni.filippetti@suse.com" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="a11017d7d4b55f4de1c2e6e26c621c2486f5849520a3e53ed0bee79ddd5e6dc7" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="coolo@suse.com" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="giovanni.filippetti@suse.com" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="62bd331fd9bbf335858309f4d92328cd4f782aa0b88522cd08354fa793e1507d" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="hschmidt@suse.com" date="1540209600">- Update to 0.3.14
  - Fix s390 activation fails due to unavailable 'dmidecode' bsc#1112702</changelog>
  <changelog author="hschmidt@suse.com" date="1540296000">- Changed "openssl" recommendation to "openssl(cli)"
  on SLE 12 SP3+ and SLE 15+ (bsc#1101470).</changelog>
  <changelog author="fschueller@suse.com" date="1541764800">- Output proper message when SUSEConnect is called without parameters (bsc#959561)
- Default to https URI when no protocol prefix is provided for --url
- Support transactional-update systems (fate#326482)</changelog>
  <changelog author="fschueller@suse.com" date="1542369600">- Update to 0.3.15
  - Output information about registration and de-registration progress</changelog>
  <changelog author="fschueller@suse.com" date="1544184000">- Update to 0.3.16
  - Show non-enabled extensions with a remark about availability</changelog>
  <changelog author="coolo@suse.com" date="1549368000">- Replace --no-ri --no-rdoc with --no-document - these options
  are obsolete since at least ruby 2.1 - and finally removed in
  ruby 2.6
- Only overwrite --bindir on fedora, it will overwrite --buildroot
  (which needs to be combined on newer fedoras)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1554206400">- Update to 0.3.17
  - Don't try to remove a service during migration if a zypper service
    plugin already exists (bsc#1128969)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1559131200">- Update to 0.3.18
- Fix base product service removal during de-registration in public clouds (bsc#1136752)</changelog>
  <changelog author="giovanni.filippetti@suse.com" date="1565179200">- Update to 0.3.19
  - Fix failing on registered system without arguments (bsc#1144020)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1565265600">- Update to 0.3.20
- Fix getting the list of installed products when zypper plugins are
  present (bsc#1143635)</changelog>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="6ac7bf42b68c64cb01b22c1357376fb57357e29225fcd4fff44aa452286662c4" name="amazon-ecs-init" arch="aarch64">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1442923200">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="3d05ccb7f44d4fd62a13686c7b3dd495da1ac360cd7adbe55138505dd822c7f6" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1442923200">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="2a4a9511eb7dc17fdfc1b4ed30a13a98ead8a925ce61436836679e1ebae83103" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1442923200">- Update to version 1.4.0.2 (1.4.0-2 upstream)
  + Enhancement - Add support for Docker 1.7.1
  + Enhancement: Cache Agent version 1.4.0
  + Feature: Read Docker endpoint from environment variable
    DOCKER_HOST if present</changelog>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="2dd8bc9a1b2a884c1650d01340ff4c9ac660537f304b49011ee833724d11d6a0" name="amazon-ssm-agent" arch="aarch64">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="8cbb45b83a80a3b12dd82d37bf5bde501076c43442796ccaf2babf7c38771687" name="amazon-ssm-agent" arch="ppc64le">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="32eba959605faee26539e203fb3150b06797a2165437757f625cf95c0253b22f" name="amazon-ssm-agent" arch="s390x">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="f546e8d65981c20759eefe6c87e33f43bae22e07fabb1b1a877f57717830eabe" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="15c24d9b5f8f5c2c554b648ecdee78393d267c14bc327e8096cdb0bfc42aa1a7" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="9e9a30914a0daa97081c30176ec7fac45539121ed441074ec4418ec899a6a035" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="1.3.1"/>
  <changelog author="michael@stroeder.com" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="michael@stroeder.com" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="mcepl@suse.com" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="80430cd3b3ccb7a43b1af555816b47c4c02550b84d4f39d235d7da636833a84b" name="ansible" arch="src">
  <version epoch="0" ver="2.9.21" rel="1.3.1"/>
  <changelog author="michael@stroeder.com" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="michael@stroeder.com" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="mcepl@suse.com" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="d35161ca5800c5bb785bde871bf27a21b13303f9cf55926717f8ed72b6088e27" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="1.3.1"/>
  <changelog author="michael@stroeder.com" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="michael@stroeder.com" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="mcepl@suse.com" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="110b6a369644482653406e5d67cd98fcdb504e3fcd1150e2432372d6d596686e" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.9.21" rel="1.3.1"/>
  <changelog author="michael@stroeder.com" date="1589284800">- update to version 2.9.8
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="michael@stroeder.com" date="1589284801">- update to version 2.9.9
  * fix for a regression introduced in 2.9.8</changelog>
  <changelog author="mcepl@suse.com" date="1590494400">- Add CVE-2020-1733_avoid_mkdir_p.patch to fix CVE-2020-1733
  (bsc#1164140)
- Add metadata information to this file to mark which SUSE
  bugzilla have been already fixed.</changelog>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
</package>
<package pkgid="1183d6108d41d25f3d9cae5321d93646e8d492fdef842adbe54a5272cd7ecfab" name="anthy" arch="aarch64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="f41e9701800e1e0dce84d98fa23c85e67d5e1ec1b33057ac1d70643923750078" name="anthy" arch="ppc64le">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="814169dfa5aa35117e1a7b3d6c989523a98fee3d9f7fa28c12c76a0046e01a0e" name="anthy" arch="s390x">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="fad19b790a25944f4af9d2e89407871c40da56a95d00f824c6b60f9e405d9c24" name="anthy" arch="src">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
  <changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
  <changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Drop unused build-time requirements on libpng, libgif, libtiff,
  krb5, openldap2</changelog>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="2917d3dba501b555384a0e594f42deb852e0ea3d7b1bd4a33f4428a97d7bb1c6" name="anthy" arch="x86_64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="9b0db9a67bf951d3525e4d731dd381d5921be91864d122d3b39c5b1a2069a6ab" name="anthy-devel" arch="aarch64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="45a82ca69c55233fbe96347a94b158b96f9a9921c5d8fb859574b8ab54bab7e5" name="anthy-devel" arch="ppc64le">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="2bac17082870ec8d87b2859bc55d1807dc86caacfeca904b3921066992481221" name="anthy-devel" arch="s390x">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="6c92671e476261f45054307dfa48a7a913a1aaa46bf585b5ba11191160f986f4" name="anthy-devel" arch="x86_64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="f90f06adbbb100e53a805410bdd3acdf049c913f62c9ac51f1b218497bfa2bdb" name="apache2" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="d630e3008ff7927173e8f6bf2a880efb83af69595371e4986f8d24766760f289" name="apache2" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="c54f33c78f108ab8f2c3d8fb640392b35a0308d0bb294b14d450675b8f2806f8" name="apache2" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="cdacda64f01b0927774a22bcbda73ebc56f94dc9fa5e208364431d8cf468b2c0" name="apache2" arch="src">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="ed655926b70e493b8b7540e294d48188b6239fc0d785b5be6d7ad6b30e79a548" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="fa007a8bdbae35fd6353abe198b4d74fcd8e8d77b84057b7695b29a46094c890" name="apache2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="9eebea863b1ca5ef5a4f0f1189a2d81bb300d208d3eec4081616ac537edb8425" name="apache2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="0fc0bd358d0252e59d0908c51a213d7543d153f7adf1335e237c02966dbe7eb8" name="apache2-devel" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="8222762b88125aa0911fa75de527cce4729bd004569f61cc3abaf27d83a5aadc" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="dd5e58c9e128d5b1de6808774d42f75e1633fe405d52c9b1afc0e873fe62b777" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="cc68ae25ae00646960b70876d4d9201e1c91602c6c7c5280b786b544dadf1617" name="apache2-event" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="2513b9bd085689beb043483366ba7f867b9f303bc5ab82f9db2698e89fb57172" name="apache2-event" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="1b5f8ea5a0928bb474d3237302fcf90406286a58754d36370f496f7d8f0fbb99" name="apache2-event" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="362b95a6dabfc0584d8f539471b9107363a20cea32f43ba850daea2f362ad08c" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="095bb282a8ba45adfbe92aa3a11418a89952facaf14557ff8a331e604f66d929" name="apache2-example-pages" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="46e6aac8baa1379b31e5704081a86fa368981fd2675ef18eab3f9f58481d3bd1" name="apache2-example-pages" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="24645aaf0ced9924dc52ffcd99ac4f98c8b43fcf843bb712428f223910f756dd" name="apache2-example-pages" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="e139688eddab7707f16213c9e41dc2d39c4b3bd2cedd40d79067090ac359fdce" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="5dad1aa4af76c08dbfad0ccbb346b1fccca100d4f112180492f54d92e9c89739" name="apache2-prefork" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="e8d81ac6860e28708acba360d4ba47dad23c861aa2514c764ef86430a7b93217" name="apache2-prefork" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="5ef5e6173de6b1955965e77b9b468b37768773f0c777d85249626e81693f14f4" name="apache2-prefork" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="f929b98446098d49d884747b018f30fba087d3102d320e37701a940efa25512d" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="da4b67b409ff629366fc27c9998d603c3b64e6679dbdc960cdd23ce576b58124" name="apache2-utils" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="42e725f139389230db0f0dd2863288b6bb62fa2736804509b41623dc61a8696f" name="apache2-utils" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="5742bd3e5bb0fc629d79fd1ddc431d9e4100b5e3c6aa1232bdc1adb2b21937b9" name="apache2-utils" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="66a67f133f3813bfbb762da1404856bedc36f13a3821c3ca386e0be01841a5a4" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="debce18dd58f747371cb36c335097cf15961563bddecf85ce89317b5f847818b" name="apache2-worker" arch="aarch64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="93f3fd81f066bd67bb320a68c2f64ebb2961bf1c51794d615297c7db8d0ed5f4" name="apache2-worker" arch="ppc64le">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="01e191c292afa45978ba04fa81d8f6036b86824c2d8f14d1ca4ce0aa5c8f6d2e" name="apache2-worker" arch="s390x">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="797ec49b212690406e40def8f0701d077502ef3b0ddf46f528a86b74cb21a164" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="3.22.1"/>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
</package>
<package pkgid="b3faf7848b4830522d71df5092fb303127afdb370834995baea9c6bc163a2cdd" name="arpwatch" arch="aarch64">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="8acd2954a946e4cca7e4a5ce00cfee555f9be79fcf6e6772637d404de4b43cbe" name="arpwatch" arch="ppc64le">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="895c3c9f5f5bc9b9b0c36e759c7ea8354735aa2fe67aa43c615a0c2d86009dd1" name="arpwatch" arch="s390x">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="8be6b12d08320d3c0ff7f2bb521dcf997f97fc234e46e2b1be42846e3cdc2bcd" name="arpwatch" arch="src">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="meissner@suse.de" date="1113825600">- Use RPM_OPT_FLAGS.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
  <changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
  <changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
  <changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
  <changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="b345c507fd6b53a2a1b803a9c6f19c1064f349295395cc82c02da3c9a51ef41c" name="arpwatch" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="a533b3094d32dd321f7dd02211db1622c8f1dcef2a50e3fb7136b23dca2327b0" name="arpwatch-ethercodes-build" arch="aarch64">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="591d821e429b3f65759ca652ab99846944edacdc9d2504ea0cc30d919df71ce7" name="arpwatch-ethercodes-build" arch="ppc64le">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="8cda9df16e693c7d98c252eebbd9de4ff4d9154bf657587537d314c298f91514" name="arpwatch-ethercodes-build" arch="s390x">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="345a168e80fbb2b7d832725268d22dba8294665a8b2fd10458a1da0d35ef8212" name="arpwatch-ethercodes-build" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="5.12.1"/>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="jsegitz@suse.com" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="jsegitz@suse.com" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
  <changelog author="jsegitz@suse.com" date="1623672000">- Fixed local privilege escalation from runtime user to root
  (bsc#1186240, CVE-2021-25321)</changelog>
</package>
<package pkgid="7a12d698df3c894db7bcff93ef107696f3a11d48c194653c6d89b62134486aa5" name="automake" arch="noarch">
  <version epoch="0" ver="1.15.1" rel="4.10.2"/>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1497960000">- Update to version 1.15.1:
  * The code has been adapted to remove a warning present since
    Perl 5.22 stating that "Unescaped left brace in regex is
    deprecated". This warning has become an hard error in Perl 5.26
  * The generated Makefiles do not rely on the obsolescent GZIP
    environment variable which was used for passing arguments to
    'gzip'.  Compatibility with old versions has been preserved.
  * Miscellaneous changes:
- Drop no longer needed patches:
  * automake-perl-5.22.patch
  * automake-fix-tests-gzip.patch
- Add keyring
- Small spec file cleanup</changelog>
  <changelog author="jayvdb@gmail.com" date="1508500800">- Add missing BuildRequires perl(Thread::Queue)</changelog>
  <changelog author="mkubecek@suse.cz" date="1619956800">- update 0001-correct-parameter-parsing-in-test-driver-script.patch
  * avoid bashisms in test-driver script (bsc#1185540)</changelog>
  <changelog author="josef.moellers@suse.com" date="1624363200">- make generated autoconf makefiles reproducible.
  [bsc#1182604, automake-reproducible.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1624449600">- Add automake-update-help2man.patch to avoid date variations in docs
  [boo#1047218, jsc#SLE-17848, automake-update-help2man.patch]</changelog>
</package>
<package pkgid="b327555c22086e0cc7ef7b57095b5f7391f506f7477188a34f99c5891c5b2be9" name="automake" arch="src">
  <version epoch="0" ver="1.15.1" rel="4.10.2"/>
  <changelog author="pth@suse.de" date="1369656000">- Update to 1.13.2 (for the full change log please see the file NEWS
  in the package documentation):
  * Obsolescent features:
  - Use of suffix-less info files (that can be specified through the
    '@setfilename' macro in Texinfo input files) is discouraged, and
    its use will raise warnings in the 'obsolete' category.
  - Use of Texinfo input files with '.txi' or '.texinfo' extensions
    is discouraged, and its use will raise warnings in the 'obsolete'
    category.  You are advised to simply use the '.texi' extension
    instead.
  * Documentation fixes:
  - The long-deprecated but still supported two-arguments invocation form
    of AM_INIT_AUTOMAKE is documented once again.
  * Bugs fixed:
  - When the 'ustar' option is used, the generated configure script no
    longer risks hanging during the tests for the availability of the
    'pax' utility, even if the user running configure has a UID or GID
    that requires more than 21 bits to be represented.
  - The obsolete macros AM_CONFIG_HEADER or AM_PROG_CC_STDC work once
    again, as they did in Automake 1.12.x (albeit printing runtime
    warnings in the 'obsolete' category).
  - aclocal will no longer error out if the first local m4 directory
    (as specified by the '-I' option or the 'AC_CONFIG_MACRO_DIRS' or
    'AC_CONFIG_MACRO_DIR' macros) doesn't exist; it will merely report
    a warning in the 'unsupported' category.
  - aclocal will no longer consider directories for extra m4 files more
    than once, even if they are specified multiple times.
  - Analysis of make flags in Automake-generated rules has been made more
    robust, and more future-proof.
- Adapt automake-SUSE.patch to the changed sources.</changelog>
  <changelog author="pth@suse.de" date="1369742400">- Remove aclocal-am_ac.patch and aclocal-am_ac.sh as they aren't
  needed anymore and instead cause havok.</changelog>
  <changelog author="pth@suse.de" date="1371038400">- Update to 1.13.3:
  * Documentation fixes:
  - The documentation no longer mistakenly reports that the
    obsolete 'AM_MKDIR_PROG_P' macro and '$(mkdir_p)' make variable
    are going to be removed in Automake 2.0.
  * Bugs fixed:
  - Byte-compilation of Emacs lisp files could fail spuriously on
    Solaris, when /bin/ksh or /usr/xpg4/bin/sh were used as shell.
  - If the same user-defined suffixes were transformed into
    different Automake-known suffixes in different Makefile.am
    files in the same project, automake could get confused and
    generate inconsistent Makefiles (automake bug#14441).
    For example, if 'Makefile.am' contained a ".ext.cc:" suffix
    rule, and 'sub/Makefile.am' contained a ".ext.c:" suffix rule,
    automake would have mistakenly placed into 'Makefile.in' rules
    to compile "*.c" files into object files, and into
    'sub/Makefile.in' rules to compile "*.cc" files into object
    files --- rather than the other way around.  This is now fixed.
  - Several spurious failures have been fixed (they hit especially
    MinGW/MSYS builds).  See automake bugs #14493, #14494, #14495,
    [#14498], #14499, #14500, #14501, #14517 and #14528.
  - Some other minor miscellaneous changes and fixlets.
  - Patches updated to they apply cleanly and with no offset.</changelog>
  <changelog author="pth@suse.de" date="1371470400">- Update to 1.13.4:
  - Fix a minor regression introduced in Automake 1.13.3: when two or more
    user-defined suffix rules were present in a single Makefile.am,
    automake would needlessly include definition of some make variables
    related to C compilation in the generated Makefile.in (bug#14560).
- Adapt automake-SuSE.patch to changed config.guess.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1376654400">- fix tests on factory
  automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1383048000">- Add expect as BuildRequires/Requires for automake-testsuite.</changelog>
  <changelog author="jengelh@inai.de" date="1391601600">- Update to new upstream release 1.14.1
  * The 'compile' script is now unconditionally required for all
  packages that perform C compilation
  * The AM_PROG_CC_C_O macro can still be called, albeit that
  should no longer be necessary.
  * The special Automake-time substitutions '%reldir%' and
  '%canon_reldir%' (and their short versions, '%D%' and '%C%'
  respectively) can now be used in an included Makefile fragment.
  The former is substituted with the relative directory of the
  included fragment (compared to the top-level including
  Makefile), and the latter with the canonicalized version of the
  same relative directory.
  * The 'shar' and 'compress' distribution formats are deprecated</changelog>
  <changelog author="pth@suse.de" date="1408968000">- Explicitely pass the directory name to setup so that the testsuite
  can run.</changelog>
  <changelog author="gber@opensuse.org" date="1412596800">- Add automake-fix-ac_aux_dir-used-before-initialized.patch in
  to fix the use of $ac_aux_dir before being initialized</changelog>
  <changelog author="pth@suse.de" date="1423569600">- Update to 1.15:
  New in 1.15:
  * Improvements and refactorings in the install-sh script:
  - It has been modernized, and now makes the following assumptions
  * unconditionally*:
    (1) a working 'dirname' program is available;
    (2) the ${var:-value} shell parameters substitution works;
    (3) the "set -f" and "set +f" shell commands work, and, respectively,
    disable and enable shell globbing.
  - The script implements stricter error checking, and now it complains
    and bails out if any of the following expectations is not met:
    (1) the options -d and -t are never used together;
    (2) the argument passed to option -t is a directory;
    (3) if there are two or more SOURCEFILE arguments, the
    DESTINATION argument must be a directory.
  * Automake-generated testsuites:
  - The default test-driver used by the Automake-generates testsuites
    now appends the result and exit status of each "plain" test to the
    associated log file (automake bug#11814).
  - The perl implementation of the TAP testsuite driver is no longer
    installed in the Automake's scripts directory, and is instead just
    distributed as a "contrib" addition.  There should be no reason to
    use this implementation anyway in real packages, since the awk+shell
    implementation of the TAP driver (which is documented in the manual)
    is more portable and has feature parity with the perl implementation.
  - The rule generating 'test-suite.log' no longer risk incurring in an
    extra useless "make all" recursive invocation in some corner cases
    (automake bug#16302).
  * Distribution:
  - Automake bug#18286: "make distcheck" could sometimes fail to detect
    files missing from the distribution tarball, especially in those cases
    where both the generated files and their dependencies are explicitly
    in $(srcdir).  An important example of this are *generated* makefile
    fragments included at Automake time in Makefile.am; e.g.:
    ...
    $(srcdir)/fragment.am: $(srcdir)/data.txt $(srcdir)/preproc.sh
    cd $(srcdir) &amp;&amp; $(SHELL) preproc.sh &lt;data.txt &gt;fragment.am
    include $(srcdir)/fragment.am
    ...
    If the use forgot to add data.txt and/or preproc.sh in the distribution
    tarball, "make distcheck" would have erroneously succeeded!  This issue
    is now fixed.
  - As a consequence of the previous change, "make distcheck" will run
    using '$(distdir)/_build/sub' as the build directory, rather than
    simply '$(distdir)/_build' (as it was the case for Automake 1.14 and
    earlier).  Consequently, the './configure' and 'make' invocations
    issued by the distcheck recipe now have $(srcdir) equal to '../..',
    rather than to just '..'.  Dependent and similar variables (e.g.,
    '$(top_srcdir)') are also changed accordingly.
    Thus, Makefiles that made assumptions about the exact values of the
    build and source directories used by "make distcheck" will have to
    be adjusted.  Notice that making such assumptions was a bad and
    unsupported practice anyway, since the exact locations of those
    directories should be considered implementation details, and we
    reserve the right to change them at any time.
  * Miscellaneous bugs fixed:
  - The expansion of AM_INIT_AUTOMAKE ends once again with a trailing
    newline (bug#16841).  Regression introduced in Automake 1.14.
  - We no longer risk to use '$ac_aux_dir' before it's defined (see
    automake bug#15981). Bug introduced in Automake 1.14.
  - The code used to detect whether the currently used make is GNU make
    or not (relying on the private macro 'am__is_gnu_make') no longer
    risks causing "Arg list too long" for projects using automatic
    dependency tracking and having a ton of source files (bug#18744).
  - Automake tries to offer a more deterministic output for generated
    Makefiles, in the face of the newly-introduced randomization for
    hash keys order in Perl 5.18.
  - In older Automake versions, if a user defined one single Makefile
    fragment (say 'foo.am') to be included via Automake includes in
    his main Makefile.am, and defined a custom make rule to generate that
    file from other data, Automake used to spuriously complain with some
    message like "... overrides Automake target '$(srcdir)/foo.am".
    This bug is now fixed.
  - The user can now extend the special .PRECIOUS target, the same way
    he could already do with the .MAKE .and .PHONY targets.
  - Some confusing typos have been fixed in the manual and in few warning
    messages (automake bug#16827 and bug#16997).
- Remove automake-fix-ac_aux_dir-used-before-initialized.patch as the
  change is incorporated now.
- Refresh automake-SuSE.patch and automake-require_file.patch so that
  they apply cleanly.</changelog>
  <changelog author="meissner@suse.com" date="1431864000">- move delete of info file to preun section</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add automake-perl-5.22.patch: Fix test suite with perl 5.22 by
  silencing some warnings.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1465905600">- add 0001-correct-parameter-parsing-in-test-driver-script.patch
  make parameter parsing of test driver script matching the help
  text</changelog>
  <changelog author="mpluskal@suse.com" date="1466942400">- Fix tests with gzip-1.7 and later:
  * automake-fix-tests-gzip.patch</changelog>
  <changelog author="bg@suse.com" date="1486728000">- use vendor suse instead of IBM on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1497960000">- Update to version 1.15.1:
  * The code has been adapted to remove a warning present since
    Perl 5.22 stating that "Unescaped left brace in regex is
    deprecated". This warning has become an hard error in Perl 5.26
  * The generated Makefiles do not rely on the obsolescent GZIP
    environment variable which was used for passing arguments to
    'gzip'.  Compatibility with old versions has been preserved.
  * Miscellaneous changes:
- Drop no longer needed patches:
  * automake-perl-5.22.patch
  * automake-fix-tests-gzip.patch
- Add keyring
- Small spec file cleanup</changelog>
  <changelog author="jayvdb@gmail.com" date="1508500800">- Add missing BuildRequires perl(Thread::Queue)</changelog>
  <changelog author="mkubecek@suse.cz" date="1619956800">- update 0001-correct-parameter-parsing-in-test-driver-script.patch
  * avoid bashisms in test-driver script (bsc#1185540)</changelog>
  <changelog author="josef.moellers@suse.com" date="1624363200">- make generated autoconf makefiles reproducible.
  [bsc#1182604, automake-reproducible.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1624449600">- Add automake-update-help2man.patch to avoid date variations in docs
  [boo#1047218, jsc#SLE-17848, automake-update-help2man.patch]</changelog>
</package>
<package pkgid="7d7c57930c7877ca61c4f93be43230e9b774cf55f0e6d88e8d2c2b86a37c9e66" name="avahi" arch="src">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="dmueller@suse.com" date="1398513600">- Do not depend on gnome-icon-theme:
  + the network-wired icon is meanwhile available in faenza, gnome,
    mate, nimbus oxygen and tango icon theme.
  + the dependency causes avahi depending on gtk3, which causes a
    build loop with gtk2.
  + the avahi-desktop.patch causes these desktop files to be only
    shown in GTK based desktops, which have any of those icon
    themes available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add avahi-outdated-URL.patch: Do not redirect users to
  &lt;http://0pointer.de/avahi-compat?s=libdns_sd&amp;e=ntpd&gt;, which no
  longer exists, but bring them to the more generic blog entry
  http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).</changelog>
  <changelog author="dimstar@opensuse.org" date="1439985600">- Sync up the multiple .spec files.</changelog>
  <changelog author="mgorse@suse.com" date="1444305600">- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for
  invalid packets (boo#947140 bsc#948277).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445256000">- Temp disable 2 old Conflicts that are breaking staging. These can
  back in once there is a new release of avahi.</changelog>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="067cf9d76cc9b129bb56cceb183e74816517c9ff97386c1a0589ac5cc9a6d465" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="015ca479d8ba100641b1569534cbefba1316e128f18617aecde60a7440fc148a" name="bash" arch="aarch64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="9fb97fd71b407d21d10854f336fb3e7ec3b7d7915a9309ce862c9c80b645bdfa" name="bash" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="e8d77dfac449aa91e462a4860fd73b5ef9e0711f9a69a98cf97f2756d90e56c9" name="bash" arch="s390x">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="528beb859b071a41a159e4f598df625ab3e16b4c77f51d1e1180e222e381c0d8" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="a73af5591830c8f75dd02477714ee709e697570e40de22a73c9be802404cfe15" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="c754181fb41c2142f9bcdfbcd1d47c52bf04880e942493375746a803aa2b5e15" name="bash-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="b8f94a1533827990d3f3a51103d83eb85b613de056e386cb792a13da8e893fce" name="bash-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="53a03c5012fcf95d3959d17015b82cbe3edb6f425c3752f96cad1a3426792d8e" name="bash-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="d3be6215c5b5a6423770dd97faae7bb294405b952b146931d30f116ae8f40e50" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="718e867af8b14506f3673918cc1a1269c147f45bc5aad8cd1fc777483579d8a6" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="f29678171ec27b21408efe9de7887cb41a0aca5ca4ba672f91c7a34555a71278" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="b70462a5366bfca4c2abd9d9809f1927cc61ed7b93367f19b213c9f4ab6e4a36" name="bash-loadables" arch="aarch64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="dbb32ea4d43a59af77f814965531fbd40fcf1f965801aab14d48dfd06ca2b679" name="bash-loadables" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="2b62abd8722d2a26bc7a705a34b5195c28989d8fc88033f56fbd76c04538d27c" name="bash-loadables" arch="s390x">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="4ab5a0f1b23bbf28a68acc8a35773796d4bf701d003b51018badaeb42eeac44f" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="91c123a953ff89753d3f9dc69bda1322e59ed2a4fe268d666fcd87433d4e4b84" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="92b1650b623c81260bbaa99e3187cc4a5fe6b9921db21d4cecfd76066659e234" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="23f8231fc5dff05bb9bb7b56716eb96816f71464208b537cb0eff7eef3141735" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0bbae4d1bd4344a3a91f1ce6e0cfeb74fd73e46ae6c91b914d5c4e7e414bfbbf" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c37982afe149007feab2788cb9778043c096fd0229b4d80fe81a04989e264145" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="bb8bfb9db160da355aef00a6a54e10490f3e2c700254ec19c970359f6d820f61" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9fd8f80ebae78b0f193f8073e27e4615dd3f99a5e05b6f2dc7d7dd69f44011be" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f4b7beaef57298d5622d81fc0c1a0ae6dcb0cb930394a287c3193cb9c6751c93" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="8948cfdd5e1950546e768d2fa89f1cfc6f3c41129b115fc3b00133516c41cec3" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ebc1bc401f8ffec8168b168e85ad137aacc578ccfa0262178b2af9781197634f" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="6e474dc867012a6df2fb7de11dce34154aa1402f3b8bf6cdac1de937a64b480e" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="649cd59dce9f57df588b9b25a11bb379f3f5ae0ed3d18dcdfbdf49cce9893d91" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f006393a721aa2cee00cb31ecb81db64721ba9d519adf4080a4f8277032a1b5d" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e345f3392f0692f8568318544e1c97392221d3a24f732d5b215a7da43756033f" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0efe2837903ae5b41a0f7272b04befc385862fb7c81cf65d3192fdedc626980f" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0966b43260dee81b19e9257e8769e9fcbfa3385646809903868524af48a3f13a" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="94934f5cec0e7a7e1ad4330c91038cacf9f44725a7ee4f1af9f1e6e7b1474797" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="61acf4365cf2f01f0b179ee59671e71fe276fe5df4238eacd4a993feb0db343f" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="591f812b7ae689c51fff781d51a83849a55e335789ca4206e09515dbb47e2f5c" name="bison" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="2a902994b2280a80b27b8214a9303580cec0ae621ede5c66d150642911a3bea1" name="bison" arch="ppc64le">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="94af3cfe7026464d1e8e625c509be63af9107a787e7f7858b25b39a1ed672ff7" name="bison" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="68512b70de2b388fd2e0b7a6d1089bd11339123723eb76c3baa257b7d81ebb1c" name="bison" arch="src">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1265630400">- package yacc.1 too</changelog>
  <changelog author="rguenther@suse.de" date="1265803200">- Update to version 2.4.1.
- Apply fix for GCC 4.5 compliance.
- Apply fix for unsupported output file names.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1307448000">- Update to version 2.5
- Fixes GCC 4.6 warnings
- Changelist too long to fit here, see NEWS.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Own /usr/share/aclocal</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 2.6.2:
  + Buffer overruns, complaints from Flex, and portability issues
    in the test suite have been fixed.
  + Changelist too long to fit here, see NEWS
- Source format is now .xz
- Remove bison-stdio.in.patch: seems upstreamed
- Add 'xz' to BuildRequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1352721600">- bison 2.6.5
  * Incorrect definitions of YY_, issued by yacc.c when no parser header is
  generated, are removed.
  * Fix compiler warnings in the generated parser (yacc.c, glr.c)
  * Warnings about uninitialized yylval and/or yylloc for push parsers with a
  pure interface have been fixed for GCC 4.0 up to 4.8, and Clang 2.9 to
  3.2.</changelog>
  <changelog author="adrian@suse.com" date="1360152000">- bison update to 2.7
  * Changes in the format of error messages
  * New format for error reports: carets
  * New value for %define variable: api.pure full
  * New %define variable: api.location.type (glr.cc, lalr1.cc, lalr1.java)
  * Exception safety (lalr1.cc)
  * Graph improvements in DOT and XSLT
  * %language is no longer an experimental feature.</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="4dbd39cd88fff001abbf11f3f50eaaff513255bfc0774faa77bb18e31c93db68" name="bison" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="ecbecb5581fe1f7cfd9276954dbfff9254adeec7aeab0341525f99e03ecce3be" name="bison-32bit" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="b263b900667792cc28b338e0270e90d4fbd77e8aa6e138b28b8b8addf91b3275" name="bison-lang" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="c0ce251943bd0e5cd65c10c8781bdd52c2eef08899a18aa762c0a3a21d4ca374" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="46b743621acb215d22fbdb9be7b0e128877259a1b99b51530a5fca4b1e4cdd0f" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="d2f8c1d0fbe89c51ac394956690bef26493b98ae03b8cf45fe8fb7b8ecef81f5" name="bluez" arch="s390x">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="a41798be5ef7c9a7cb3cb45601910551c72a5730f6b432dc78309ff5c1e14497" name="bluez" arch="src">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="a607aa619da89ce2004ac9a6dc7900bccef37d831d61173aaa00d418ea04a20f" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="35f8eb59f8b82355fc4b212643922d43bb933634085a47a74f568db32016c0b3" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="cb11f7b1b9760b302052051afbde671325f1db3b1813b443c076d17f0dc969fa" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="04c7997aaee1b4947318e84d2833fd2b0d0f86515268e9c5790b6964a25a8004" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="55582cce0b20bfcd28adf50462a1946dd8cc94a775514ea3099922e123e9eccf" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="fe639fb74ecb2b70043e27b904b4ae9a9e7da8b010aecfbe5aa258104b2b1c1e" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="fc2402ba11e09b4f310376f019f85888c3068b2e810c0a2f3f94a4f66b258b7d" name="bluez-deprecated" arch="aarch64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="1f286a109430165ddb4b66fe7e5b0f436e422ce5b59b300ceda28657afb2b68c" name="bluez-deprecated" arch="ppc64le">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="54989b303c19929c908b76d74464af655fd889149bde8854b31a948eee8cdc2b" name="bluez-deprecated" arch="s390x">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="74f71f81b2773242c1c6eef3b8cd8c2d8918f9cad7ed205a625727c84cc51067" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="0796ce4dd27dbdc55757f182a042df18db14f333b843d739083aecbe96f3d1f9" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="2117ba9b222881b004d04076145a521ea3db1e6d54decb7d08c3a85f25c6959f" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="c00d3502d6e1939c5be9081c15da4221d3e90314325876b58715aa5777e50a94" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="01b35517ce5ec2f427cd8f194a6c6c105b58fe3407be5d4e4583bccb2c3db64e" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="0c8963e2a61e70049d64733b6c4252419c3a29960ac3b1227ed8d98f6aaa9b21" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="50b2f2ff06bb4ea8cac010456361fba6e9de52c1cc5f2487a9800fe46ccf6c1d" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="8809acb460520beb4b63d34e8b7f708bff412f00a3b62e85a3e708cad2a5c59f" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="ee4ace692f292841308bb32651e5f89c88f03940aefb93535add0950b4a0652f" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="f2703e95e8c6da93b9c899464e50bf70a9bc1c930a22edf617bfd5caecf969c0" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="8924f21129375cda67aeca2b98f3e75d8067bf45edae2201cce8b33927b88053" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="55ac4a0222db8945d3ba577faf1458a10812281eaa3904a196c5c559a751f9ce" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="37a93e8ebcde8d9f9988e5725d6e53c1364737a30783f39abdec97fd46dc2ce2" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="a50130a7a73e584cb5ff6cb7c0bcd842a43a44328e2fb6e70f899a27041fab80" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="fa950cdaaf0fc333687886494fb99e3090fcc9c5151746cb38006c9fb6e965d4" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="e9235dce9ae8b4d1323fd1b7b1c484dac809f98241069af4aebc60a86609bc2c" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="a3bb4c3af66688d902c52d4b9e36a6969e3e162a0e1bcce245e418f301628f06" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.64" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * CVE-2016-1000338: Fix DSA ASN.1 validation during encoding of
    signature on verification (boo#1095722).
  * CVE-2016-1000339: Fix AESEngine key information leak via lookup
    table accesses (boo#1095853).
  * CVE-2016-1000340: Fix carry propagation bugs in the
    implementation of squaring for several raw math classes
    (boo#1095854).
  * CVE-2016-1000341: Fix DSA signature generation vulnerability to
    timing attack (boo#1095852).
  * CVE-2016-1000342: Fix ECDSA ASN.1 validation during encoding of
    signature on verification (boo#1095850).
  * CVE-2016-1000343: Fix week default settings for private DSA key
    pair generation (boo#1095849).
  * CVE-2016-1000344: Remove DHIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096026).
  * CVE-2016-1000345: Fix DHIES/ECIES CBC mode padding oracle
    attack (boo#1096025).
  * CVE-2016-1000346: Fix other party DH public key validation
    (boo#1096024).
  * CVE-2016-1000352: Remove ECIES from the provider to disable the
    unsafe usage of ECB mode (boo#1096022).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="pmonreal@suse.com" date="1621598400">- Security fix: [bsc#1186328, CVE-2020-15522]
  * Fixes a timing issue within the EC math library
  * Blind the inversion when normalizing
- Add bouncycastle-CVE-2020-15522.patch</changelog>
</package>
<package pkgid="b3f8b48eab3c626289db4307046fd7fb580a76c8ab05dcc50216038ad6571b99" name="brp-check-suse" arch="aarch64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="3.18.2"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="lnussel@suse.de" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="8d9da5fe90a9a25ff976c837d5d1d55d25f790947d327ab3672c80636169321d" name="brp-check-suse" arch="ppc64le">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="3.18.2"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="lnussel@suse.de" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="6dd8454d6287943950a680e3757e8564f2e11da55d0f6cb30c6c1e434a3b1a89" name="brp-check-suse" arch="s390x">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="3.18.2"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="lnussel@suse.de" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="c8fb8f1354c3ca3c33949bc577c72e7412a4a8d046b7ea10ce4d0e154709d048" name="brp-check-suse" arch="src">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="3.18.2"/>
  <changelog author="ro@suse.de" date="1404302400">- do not ignore errors just because package has no init script
- allow .local scripts for aaa_base so we can ghost them there
- remove outdated echo line</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203200">- remove brp-20-check-la, it is broken and la files are mostly
  deleted anyway
- reduction of number of calls used by using more bashism, passing
  more regexp at once, use more double quotes
  brp-15-strip-debug
  brp-45-tcl
  brp-50-check-python
  brp-60-hook</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406203201">- All GTK apps are allowed to assume the presence of the
  Adwaita-icon-theme package; As a result of this, we now accept icons
  in icons/Adwaita on the whitelist (just as hicolor).
  patch by DimStar</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406289600">- massive rewrite of brp-25-symlink to reduce number of calls our
  tests shown speedup from 8,5 mins to 1 min for kernel-default
  (year ago)</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406376000">- brp-25-symlink: fix eating /./ in path</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406462400">- brp-25-symlink: add mising '/etc/alternatives' back to whitelist</changelog>
  <changelog author="sleep_walker@suse.cz" date="1406721600">- correct URL to github repo</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="lnussel@suse.de" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="ceaa02be1139c488ecedbaf2748c12b84798b7e8e1f3f512dedeffcae2f3227e" name="brp-check-suse" arch="x86_64">
  <version epoch="0" ver="84.87+git20181106.224b37d" rel="3.18.2"/>
  <changelog author="dmueller@suse.com" date="1413806400">- Update to version 13.2+git20140829.9539e1d:
  + xdg_menu: use File::Find instead of calling out to find
  + brp-25-symlink: fix missing alternatives
  + brp-25-symlink: fix eating /./ in path
  + brp-25-symlink: massive rewrite to reduce number of calls
  + brp-40-rootfs: reduce number of calls
  + brp-60-hook: add some double quotes
  + brp-50-check-python: add some double quotes, remove commented code
  + Adwaita is a defined icon theme mandatory installed as dependency to GTK3.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1424174400">- Update to version 13.2+git20150217.031533d:
  + - Update applications.menu from desktop-data to accept new
    Categories (bnc#443364), remove PuzzleGame (now LogicGame)
    (thanks sbrabec)</changelog>
  <changelog author="ro@suse.de" date="1428667200">- do not fail over new DefaultLayout element (from adrian)
- brp-25-symlink: handle properly symlinks to root directory
  (fix bnc#781101) (from sleep_walker)</changelog>
  <changelog author="ro@suse.de" date="1452686400">- update tarball to actually include last fixes, new version
  is 13.2+git20150521.971ea2f (bnc#781101)
- change neededforbuild to BuildRequires in output text in
  brp-25-symlink
- do not fail over new DefaultLayout element
- brp-25-symlink: handle properly symlinks to root directory</changelog>
  <changelog author="lnussel@suse.de" date="1473163200">- Update to version 84.87+git20160906.bb0a7d0:
  * brp-25-symlink: handle properly symlinks to root directory
  * - do not fail over new DefaultLayout element
  * neededforbuild -&gt; BuildRequires
  * properly create tarball
  * Hint to the desktop category rules. (#6)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496404800">- Update to version 84.87+git20170602.cec5415:
  * Add missing newline to Category error message
  * brp-25-symlink: do not relink /etc/os-release</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1536408000">- Update to version 84.87+git20180809.3335364:
  * Handle whitespace in symlinks correctly
- Use %license
- Keep brp-65-lib64-linux also on aarch64</changelog>
  <changelog author="ro@suse.de" date="1541505600">- Update to version 84.87+git20181106.224b37d:
  * brp-15-strip-debug: deal with libs where file outputs
    more text after "not stripped" (bsc#1114695)</changelog>
  <changelog author="lnussel@suse.de" date="1602504000">- Remove desktop file category check. The check was dropped in
  Factory a while ago already which makes backports of packages
  harder (boo#1074711).</changelog>
  <changelog author="ro@suse.de" date="1618833600">- add patch to implement fipscheck (bsc#1184555)
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch</changelog>
  <changelog author="ro@suse.de" date="1618920000">- revisited bsc#1184555 help generating FIPS hmac files
- drop previous patch
  brp-check-suse-bf6495be895f87b65ac358d22e0ae945b0aa3462.patch
- add brp-50-generate-fips-hmac</changelog>
  <changelog author="ro@suse.de" date="1619784000">- make sure all brp-scripts are actually executable
  (still bsc#1184555)</changelog>
  <changelog author="ro@suse.de" date="1620993600">- add patches to support reproducible builds (bsc#1186049)
  - brp-25-symlink-sort-input.patch
  - normalize input by sorting the list of found symlinks
  - brp-25-symlink-print-all-errors.patch
  - print all errors before exiting
  - brp-75-ar-initial-version.patch
  - sort the content of ar archives using objcopy
  - brp-75-ar-allow-override.patch
  - allow overriding the ar sorting by using NO_BRP_AR</changelog>
</package>
<package pkgid="5784788a9c576407de0e2702073e9d2426c268794ac1f4669483837170f807b5" name="btrfsmaintenance" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="3.3.1"/>
  <changelog author="dsterba@suse.cz" date="1457006400">- version 0.2
  - updated documentation
  - support debian-like configuration paths
  - no hardcoded paths to external utilities
  - fixed logger name typos for 'journal' target
  - defrag fixes (sysconfig, find arguments)</changelog>
  <changelog author="dsterba@suse.cz" date="1479124800">- version 0.3
  - add syslog to logging targets
  - add none target (/dev/null)
  - autodetect btrfs filesystems for balance, scrub and trim
  - detect mixed blockgroups and use correct balance filters
  - fix uninstall rules
  - fix capturing entire output to the log
  - fix when cron files are symlinks
  - add generic installation script
  - doc updates: retention policy tuning</changelog>
  <changelog author="dsterba@suse.cz" date="1491480000">- version 0.3.1
  - dist-install: fix installation paths, install functions
  - functions: fix syntax to be compatible with dash
  - spec: install functions file</changelog>
  <changelog author="lnussel@suse.de" date="1499256000">- Require btrfsprogs (bsc#1047226)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510056000">- Add btrfsmaintenance-0.3.1-fix-rpm-db-path.patch:
  * Change RPM database path to /usr/lib/sysimage/rpm for
    Tumbleweed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510315200">- Fix cron symlinks removal upon package upgrade (boo#904518):
  * The problem was in the preun section (in the old RPM).
  * This means the symlinks are removed by this update, but won't
    be by the next ones.
  * Please run 'systemctl start btrfsmaintenance-refresh' one more
    time to fix your symlinks.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.com" date="1512475200">- Add patch to use systemd timer instead of cron (pull-request-36.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Don't call btrfsmaintenance-refresh-cron.sh in %post, this is
  done already by the systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1512561601">- pull-request-36.patch: update patch</changelog>
  <changelog author="kukuk@suse.de" date="1513512000">- Switch default of btrfsmaintenance-refresh.service to systemd-timer,
  too (btrfsmaintenance-switch-to-timer.patch) [bsc#1073204]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1513944000">- Fix systemd timers enabled even if period is set to none:
  * Micro change in pull-request-36.patch (bsc#1075884)
- Clean spec file:
  * Removed support for suse_version &lt;= 1210.
  * Removed call to btrfsmaintenance-refresh-cron.sh upon deletion
    (not needed anymore since we use systemd timers which are
    handled by macros).
  * Ran spec-cleaner.</changelog>
  <changelog author="dsterba@suse.cz" date="1515931200">- update to version 0.4
  - add support for systemd timers and use them by default; the alternative
    cron scripts are still present (#29, #36)
  - add automatic monitoring (via systemd.path) of the config file,
    no manual updates by btrfsmaintenance-refresh.service needed (#38)
  - fix RPM database path detection
  - spec file cleanups
  - documentation updates
- removed patches:
  - btrfsmaintenance-0.3.1-fix-rpm-db-path.patch (upstream)
  - btrfsmaintenance-switch-to-timer.patch (upstream)
  - pull-request-36.patch (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1517832000">- Move the defrag plugin over to Python 3. (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="rgoldwyn@suse.com" date="1605873600">- btrfsmaintenance.service-delete-install-section.patch: Remove [Install]
  section (bsc#1178874)</changelog>
</package>
<package pkgid="9b83f0f73b779e8c4cc2c5019b35e9457bd6259d70cf9364626bb710966e1856" name="btrfsmaintenance" arch="src">
  <version epoch="0" ver="0.4.2" rel="3.3.1"/>
  <changelog author="dsterba@suse.cz" date="1457006400">- version 0.2
  - updated documentation
  - support debian-like configuration paths
  - no hardcoded paths to external utilities
  - fixed logger name typos for 'journal' target
  - defrag fixes (sysconfig, find arguments)</changelog>
  <changelog author="dsterba@suse.cz" date="1479124800">- version 0.3
  - add syslog to logging targets
  - add none target (/dev/null)
  - autodetect btrfs filesystems for balance, scrub and trim
  - detect mixed blockgroups and use correct balance filters
  - fix uninstall rules
  - fix capturing entire output to the log
  - fix when cron files are symlinks
  - add generic installation script
  - doc updates: retention policy tuning</changelog>
  <changelog author="dsterba@suse.cz" date="1491480000">- version 0.3.1
  - dist-install: fix installation paths, install functions
  - functions: fix syntax to be compatible with dash
  - spec: install functions file</changelog>
  <changelog author="lnussel@suse.de" date="1499256000">- Require btrfsprogs (bsc#1047226)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510056000">- Add btrfsmaintenance-0.3.1-fix-rpm-db-path.patch:
  * Change RPM database path to /usr/lib/sysimage/rpm for
    Tumbleweed.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1510315200">- Fix cron symlinks removal upon package upgrade (boo#904518):
  * The problem was in the preun section (in the old RPM).
  * This means the symlinks are removed by this update, but won't
    be by the next ones.
  * Please run 'systemctl start btrfsmaintenance-refresh' one more
    time to fix your symlinks.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.com" date="1512475200">- Add patch to use systemd timer instead of cron (pull-request-36.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Don't call btrfsmaintenance-refresh-cron.sh in %post, this is
  done already by the systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1512561601">- pull-request-36.patch: update patch</changelog>
  <changelog author="kukuk@suse.de" date="1513512000">- Switch default of btrfsmaintenance-refresh.service to systemd-timer,
  too (btrfsmaintenance-switch-to-timer.patch) [bsc#1073204]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1513944000">- Fix systemd timers enabled even if period is set to none:
  * Micro change in pull-request-36.patch (bsc#1075884)
- Clean spec file:
  * Removed support for suse_version &lt;= 1210.
  * Removed call to btrfsmaintenance-refresh-cron.sh upon deletion
    (not needed anymore since we use systemd timers which are
    handled by macros).
  * Ran spec-cleaner.</changelog>
  <changelog author="dsterba@suse.cz" date="1515931200">- update to version 0.4
  - add support for systemd timers and use them by default; the alternative
    cron scripts are still present (#29, #36)
  - add automatic monitoring (via systemd.path) of the config file,
    no manual updates by btrfsmaintenance-refresh.service needed (#38)
  - fix RPM database path detection
  - spec file cleanups
  - documentation updates
- removed patches:
  - btrfsmaintenance-0.3.1-fix-rpm-db-path.patch (upstream)
  - btrfsmaintenance-switch-to-timer.patch (upstream)
  - pull-request-36.patch (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1517832000">- Move the defrag plugin over to Python 3. (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="rgoldwyn@suse.com" date="1605873600">- btrfsmaintenance.service-delete-install-section.patch: Remove [Install]
  section (bsc#1178874)</changelog>
</package>
<package pkgid="54be2fd46ab31b7107e7aea07c3dc209bd3b7b15447aa03e2a23733d7eef5c4e" name="build" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="5fe4c5c98d87a240a7a4c39bd05b9c4cf0cebb9944db3c3c6259f57b8cbba9f4" name="build" arch="src">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="e69d25993c37b7e215e8e09390a2f1f111525e1c5364f15e3cfa5bd38d4c1150" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="2ed14653003f9a2e1723cb0281fb287e3e0719ab0279f7fffa9b2379f7001877" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="c48a5dcb783a89f325c7a56cdab7be5fd49721e34a99b4ac7c6f0edea54e744b" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="0f0db04cd83b46ceadae80033318775d15c1e6686d5406c573f755024cfd918f" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="414ac69abe9c5a93f2f47bd50ed43ee740c91744ff45c80305c9775e12628bab" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="f70972e936b1095ca689dbd0c4bc395446d5bad664e2bf656200fc5a537f278b" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20210120" rel="6.1"/>
  <changelog author="adrian@suse.de" date="1562673600">- fail build on preinstall failure
- avoid dependency errors on Fedora 30
- fixes for simpleimage vm build support
- support zstd decompression with old rpms
- license tag fixes</changelog>
  <changelog author="adrian@suse.de" date="1569240000">- build-recipe-dsc: Move all build results, not just *.deb and *.changes
- Mount /sys in chroot build
- vc: Do not open the editor if content is set
- adding leap 15.2 and SLE 15 SP2 configs
- Fix some rpmlint warnings
- return exit status 9 in the genbuildreqs case
- Export SYSTEMD_OFFLINE=1 to avoid failures from systemctl</changelog>
  <changelog author="adrian@suse.de" date="1573732800">- Add Fedora module parser
- Rpmmd parser: set up a dummy ExternEnt handler
- Add support for modules and publish flags
- add zstd to recommends
- Support rpm's new expression expansion syntax</changelog>
  <changelog author="adrian@suse.de" date="1575547200">- qemu vm_type is running qemu system emulator now. Works for:
  * aarch64
  * armv7l
  * ppc64/ppc64le
  * s390/s390x
  * riscv64
  Note: this requires a kernel and initrd in build target via
    kernel-obs-build mechanic
- various --shell improvements
- new --shell-cmd to run commands in chroot/KVM/Qemu/... directly
- raising minimal required memory in qemu mode to 512MB to be able
  to run Linux kernel at least
- Normalize epoch 0 away when reading the module info
- Add systemd-nspawn backend (by Oleg Girko)</changelog>
  <changelog author="adrian@suse.de" date="1578398400">- allow to enter an existing buildroot w/o recipe
- generate milestone files also for pure online media
- fix ccache setup of non-dotted compiler versions</changelog>
  <changelog author="adrian@suse.de" date="1578657600">- Arch Linux zstd format support
- fix testbuild fail with latest rpm in SP2 and Leap 15.2
- do not retry automatically on disk full error</changelog>
  <changelog author="adrian@suse.de" date="1579694400">- fix createrepo existens check for appimager and docker builds
  in chroot
- support to use virt-make-fs for ext3 VM builds</changelog>
  <changelog author="adrian@suse.de" date="1579867200">- Fix crash when using preinstall dependency expansion in OBS
- build-vm-kvm: use /boot/kernel.obs.build and /boot/initrd.obs.build
  as fallback regardless of the platform to have a global fallback
  kernel to use for distros that do not use the "kernel-obs-build"
  package to provide the guests kernel and initrd as the system
  binaries are not reliable for use in a guest system
- use abuild user if $NOROOTFORBUILD is set.</changelog>
  <changelog author="adrian@suse.de" date="1579867201">- fix SLE 15 configurations
- Fix dist autodetection for sle15-sp2</changelog>
  <changelog author="adrian@suse.de" date="1580212800">- support OBS-Milestone comment for kiwi
- switch to preinstall expansion for factory</changelog>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
</package>
<package pkgid="6510a4840d4495914e04fe6813b2a7bbbfd394088d85ee77dfe0b83f310cc3e9" name="buildah" arch="aarch64">
  <version epoch="0" ver="1.17.0" rel="3.9.1"/>
  <changelog author="sgrunert@suse.com" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="sgrunert@suse.com" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="rbrown@suse.com" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="sgrunert@suse.com" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="sgrunert@suse.com" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="sgrunert@suse.com" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="sgrunert@suse.com" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="sgrunert@suse.com" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="sgrunert@suse.com" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="sgrunert@suse.com" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="sgrunert@suse.com" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="sgrunert@suse.com" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="fcastelli@suse.com" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="rhafer@suse.com" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- buildah required cni (bsc#1187812)</changelog>
</package>
<package pkgid="f69373bcc52b5c9f75587e5f5b28a8d5a1dc0edbd92d32ddb8518693ff0d1293" name="buildah" arch="ppc64le">
  <version epoch="0" ver="1.17.0" rel="3.9.1"/>
  <changelog author="sgrunert@suse.com" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="sgrunert@suse.com" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="rbrown@suse.com" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="sgrunert@suse.com" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="sgrunert@suse.com" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="sgrunert@suse.com" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="sgrunert@suse.com" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="sgrunert@suse.com" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="sgrunert@suse.com" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="sgrunert@suse.com" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="sgrunert@suse.com" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="sgrunert@suse.com" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="fcastelli@suse.com" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="rhafer@suse.com" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- buildah required cni (bsc#1187812)</changelog>
</package>
<package pkgid="1b7a4aef786465b5823231322e227b1c28e82526c04f927aac097aaf32e3e925" name="buildah" arch="s390x">
  <version epoch="0" ver="1.17.0" rel="3.9.1"/>
  <changelog author="sgrunert@suse.com" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="sgrunert@suse.com" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="rbrown@suse.com" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="sgrunert@suse.com" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="sgrunert@suse.com" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="sgrunert@suse.com" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="sgrunert@suse.com" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="sgrunert@suse.com" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="sgrunert@suse.com" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="sgrunert@suse.com" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="sgrunert@suse.com" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="sgrunert@suse.com" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="fcastelli@suse.com" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="rhafer@suse.com" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- buildah required cni (bsc#1187812)</changelog>
</package>
<package pkgid="d2270bfb4c5548fcdad6e224c569096e8f40ebd58d5572f867f2726d02c8d79f" name="buildah" arch="src">
  <version epoch="0" ver="1.17.0" rel="3.9.1"/>
  <changelog author="sgrunert@suse.com" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="sgrunert@suse.com" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="rbrown@suse.com" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="sgrunert@suse.com" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="sgrunert@suse.com" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="sgrunert@suse.com" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="sgrunert@suse.com" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="sgrunert@suse.com" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="sgrunert@suse.com" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="sgrunert@suse.com" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="sgrunert@suse.com" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="sgrunert@suse.com" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="fcastelli@suse.com" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="rhafer@suse.com" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- buildah required cni (bsc#1187812)</changelog>
</package>
<package pkgid="2c3a6506ab177c7149810fcd66ac507d6ec50cb22eeb69026f6c07d7090fefdd" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="3.9.1"/>
  <changelog author="sgrunert@suse.com" date="1567425600">- Add patch for CVE-2019-10214. bsc#1144065
  + CVE-2019-10214.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1567684800">- Update to v1.11.0
  * Add --digestfile and Re-add push statement as debug
  * Add --log-level command line option and deprecate --debug
  * Add security-related volume options to validator
  * Allow buildah bud to be called without arguments
  * Allow to override build date with SOURCE_DATE_EPOCH
  * Correctly detect ExitError values from Run()
  * Disable empty logrus timestamps to reduce logger noise
  * Fix directory pull image names
  * Fix handling of /dev/null masked devices
  * Fix possible runtime panic on bud
  * Update bud/from help to contain indicator for --dns=none
  * Update documentation about bud
  * Update shebangs to take env into consideration
  * Use content digests in ADD/COPY history entries
  * add support for cgroupsV2
  * add: add a DryRun flag to AddAndCopyOptions
  * add: handle hard links when copying with .dockerignore
  * add: teach copyFileWithTar() about symlinks and directories
  * imagebuilder: fix detection of referenced stage roots
  * pull/commit/push: pay attention to $BUILD_REGISTRY_SOURCES
  * run_linux: fix mounting /sys in a userns
- Remove hardly set build tags in favor of the Makefile</changelog>
  <changelog author="sgrunert@suse.com" date="1568376000">- Update to v1.11.1
  * Add --devices flag to bud and from
  * Add support for /run/.containerenv
  * Allow mounts.conf entries for equal source and destination paths
  * Fix label and annotation for 1-line Dockerfiles
  * Preserve file and directory mount permissions
  * Replace --debug=false with --log-level=error
  * Set TMPDIR to /var/tmp by default
  * Truncate output of too long image names
  * Ignore EmptyLayer if Squash is set</changelog>
  <changelog author="rbrown@suse.com" date="1569240000">- Update to v1.11.2
  * Add some cleanup code
  * Move devices code to unit specific directory.</changelog>
  <changelog author="sgrunert@suse.com" date="1570449600">- Update to v1.11.3
  * Add cgroups2
  * Add support for retrieving context from stdin "-"
  * Added tutorial on how to include Buildah as library
  * Fix --build-args handling
  * Print build 'STEP' line to stdout, not stderr
  * Use Containerfile by default</changelog>
  <changelog author="sgrunert@suse.com" date="1572350400">- Update to v1.11.4
  * buildah: add a "manifest" command
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1573560000">- Update to v1.11.5
  * buildah: add "manifest" command
  * pkg/supplemented: add a package for grouping images together
  * pkg/manifests: add a manifest list build/manipulation API
  * Update for ErrUnauthorizedForCredentials API change in containers/image
  * Update for manifest-lists API changes in containers/image
  * version: also note the version of containers/image
  * Move to containers/image v5.0.0
  * Enable --device directory as src device
  * Add clarification to the Tutorial for new users
  * Silence "using cache" to ensure -q is fully quiet
  * Move runtime flag to bud from common
  * Commit: check for storage.ErrImageUnknown using errors.Cause()
  * Fix crash when invalid COPY --from flag is specified.</changelog>
  <changelog author="sgrunert@suse.com" date="1575547200">- Update to v1.11.6
  * Handle missing equal sign in --from and --chown flags
    for COPY/ADD
  * bud COPY does not download URL
  * Fix .dockerignore exclude regression
  * commit(docker): always set ContainerID and ContainerConfig
  * Touch up commit man page image parameter
  * Add builder identity annotations.</changelog>
  <changelog author="sgrunert@suse.com" date="1576497600">- Update to v1.12.0
  * Allow ADD to use http src
  * imgtype: reset storage opts if driver overridden
  * Start using containers/common
  * overlay.bats typo: fuse-overlays should be fuse-overlayfs
  * chroot: Unmount with MNT_DETACH instead of UnmountMountpoints()
  * bind: don't complain about missing mountpoints
  * imgtype: check earlier for expected manifest type
  * Add history names support</changelog>
  <changelog author="sgrunert@suse.com" date="1579089600">- Update to v1.13.1
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR</changelog>
  <changelog author="sgrunert@suse.com" date="1581595200">- Update to v1.14.0
  * getDateAndDigestAndSize(): use manifest.Digest
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * parse: don't complain about not being able to rename something
    to itself
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Add --sign-by to bud/commit/push, --remove-signatures for
    pull/push
  * Add support for containers.conf
  * manifest push: add --format option</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v1.14.2
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * Improve remote manifest retrieval
  * Correct a couple of incorrect format specifiers
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $
  * getDateAndDigestAndSize(): handle creation time not being set
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * pull/from/commit/push: retry on most failures
  * Repair buildah so it can use containers.conf on the server side
  * Fixing formatting &amp; build instructions
  * Fix XDG_RUNTIME_DIR for authfile
  * Show validation command-line</changelog>
  <changelog author="sgrunert@suse.com" date="1585310400">- Update to v1.14.4
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Preserve volume uid and gid through subsequent commands
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands</changelog>
  <changelog author="sgrunert@suse.com" date="1585569600">- Update to v1.14.5
  * Revert FIPS mode change</changelog>
  <changelog author="sgrunert@suse.com" date="1586174400">- Update to v1.14.6
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.15.0
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * fix lighttpd example
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Add preliminary profiling support to the CLI
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Return exit code from failed containers
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Remove warning for systemd inside of container</changelog>
  <changelog author="sgrunert@suse.com" date="1596456000">- Update to v1.15.1
  * Mask over the /sys/fs/selinux in mask branch
  * chroot: do not use setgroups if it is blocked
  * chroot, run: not fail on bind mounts from /sys
  * Allow "readonly" as alias to "ro" in mount options
  * Add VFS additional image store to container
  * vendor golang.org/x/text@v0.3.3
  * Make imagebuildah.BuildOptions.Architecture/OS optional</changelog>
  <changelog author="fcastelli@suse.com" date="1601467200">- Update to v1.16.2
  * fix build on 32bit arches
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev</changelog>
  <changelog author="rhafer@suse.com" date="1604404800">- Update to v1.17.0 (bsc#1165184)
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong containers/podman#7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with make nixpkgs
  * Set directory ownership when copied with ID mapping
  * build(deps): bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * build(deps): bump github.com/containers/common from 0.23.0 to 0.24.0
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with make nixpkgs
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of manifest add sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update manifest add man page
  * Extend flags of manifest add
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * CI: expand cross-compile checks
- SLE: Remove unneeded patch: CVE-2019-10214.patch</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- buildah required cni (bsc#1187812)</changelog>
</package>
<package pkgid="2ca24303dd402b66504f0df56d5cc214be2407e186e53b15656839db0d139f5f" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="485d2b892faa97dc70e590a3eb7237069427a33554a862bc0c7a6e56993f01a9" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="f7c35fa547987cbe21f78786133c1bfef9c24c66b76109da3800082cce9c9118" name="cargo" arch="s390x">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="803bfcb62e231e94a963627ca700000b96facf535255dd69a6143c449bda258c" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="4bd8114b032be653249a5cdb7ff4226d5d7d90edebdcb0dd6c29d6f6f6c7f2dc" name="cargo-doc" arch="noarch">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="d497fecfb99be71bfdfce72b8277d2c496ce82b70b1fb9627914c586aef93a54" name="ceph" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5c648ad31c684672abb59eb5998f9edfce411cd10bf2adab11807c7f6eb69c67" name="ceph" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a4ef0c10d5d59211861a4150feee759773febcf5d4fc16e8a9d3df4e1f603d5e" name="ceph" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae94f247135551828ab8e815059098bbbb33d4df0b8fbdc74e60d715fa66554a" name="ceph" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c4741ed744a9af710487e99a514f51645778a7b6b3745eff03e8d180b5c144d9" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="70275a3054acbf56e960c407b5d5efe087744ef8ebe0ade4be98d25b5f79b1aa" name="ceph" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="64f15f7f3abbb5094f4f6ca8c3a18de23163ff811d742a97e59b3c284fd9945f" name="ceph" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="28312401675c5e94ab36ec86410feed1557d4375ddd961cb1fbfc655f01fc9e2" name="ceph" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="4e890b578ab1f5b1e9d490967a270d41f46b18ea51c2d3b5ceebf9b32c66466c" name="ceph" arch="src">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="007cd6f34d4ec99638f10cf0813aa9cc13a7c01a54f9afaf8c1298347fe8a798" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d3c856df5ed6cb3e060dbbf2c43becad24ee94dd79c36b917e84144b6398b2f2" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="583b0aa56bf71b4edc17d77cb798325189f30d0a35d5e3d8cedc6309a03d869b" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="58352676522070ccf35113093851a1849e1dd99a70ccc4ea05fd76b9213509b4" name="ceph-base" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cf8ca10556c6e783c2d1373d718c11a417e58088ea50648d40dc9cb2355e867f" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="27ab223673bfa47092eaf08c306d7b91083b108d14aa4d9e23a80eb790ab0ef6" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="2bc9ee65901be6b8f2d6798fa3753d3cdddfa2faa33b1e43c28f5ed141010c91" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ce02f0fae9af42cc186339f20361dde29f4cef4aa5336f71ed7dc653fbb3fb20" name="ceph-base" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ff0ccfbd51a884a47dae35a55981ef97795cbe8a6436d24e0377b8d986575e70" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d8f7dc3be048989466723ab64ecff1fd95faaa90476d66c61ebdae963530a994" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ff43a824bd29d0746c97ff158f21d152a9dec650c1735eb77755f9843929396e" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ad4e9e531059f0c85c3e9b4432b2d6771a8c71db0bd18a1b320c9ffa203db751" name="ceph-common" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f179935aece025026b57eb963482d42c70322a16389f6f9c433cbaff920f8a0b" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="741e4cc3c2bfaf71ead4d18b62f21bff21ed287b64c87b1e8bade8c596198ad5" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="c5b7048320b889d5529faecff3840c798d191e27e202834e71eba459c8935262" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="64396b05fa8f8d9dcb88993a7830d2ec2305681d46f2e6895383db5000fa5957" name="ceph-common" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="67f011377c3f679cbe7c9859717ddadc16fea28281fd5ed45803dabc9ee556f7" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="7ed0914062c5f34ca402ba59ecb4a712627ca75f17b0ba41f9a9268afbeac1ea" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="842f02862bbf2859e22a751636241f85b26d70c7cf888f91739790d66fe2e616" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6a29026ff365d03ebefbb17537afb2a99b536b4563f916fd127e888f6dd050e8" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0616840d433d9e4ec48373680cbe8203373d9bd302096c1c3e3e028302342e0c" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="60907ac4551cc6fa8e29e9369b32738ec0e44a1d075b777feaf70e0570d959b5" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="be44980ad3df432f85d9ecd380948fa9c202e3d5d6f99cb52fb8288be9cc8a78" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="692db2c267909613df19f12ba2f05cf639ec5be5bd3ee9c3988d3433b5cbeec6" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="1c0c953142fba036437a7e667d12ee4066b376e16479cf78d96925a76dabe3f9" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="2a6fa905cb0ca91857d35415a3702a4c53d4acedae461f88b41fb3fcc07d548c" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5562a2cede27a881a6e90e7e369f9af013357ca4069388bbd5f8a91c68c1a3d0" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="edf7ee77a7e47deb0e973882868a5b7cf1449990638074d73c145644ffa0645e" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7d764e6cf6b3ee7c64efd57db6e44aecaa4232901d9339ad7b79a84cb46064c" name="ceph-immutable-object-cache" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ac1a2848341c807a481dbf46fcc51772b90ff0cd45c0284da9df0601088e7844" name="ceph-immutable-object-cache" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f3d23b7e5ed2662ae6a95b7daff4a7f75c64e7686973b560c050eaa6dd8fde72" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fa765a4c39b056d06dc99fea7232304057d470246e7bb0ccddcc6d2b5b6377ad" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="79c89390e77f769fa9386adaff1fc66909ff03c89f45117a004740d8e081ae01" name="ceph-immutable-object-cache" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="604847d583b95ae57efbbd07c9e5ced60beb084388326e1d87e6571aa6ab65af" name="ceph-immutable-object-cache" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ce9b574ca5ee0ebd940b9d94f4f93c2b8f0844a7f2c4072da26e416e9d1d3cb8" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="4be275e97b4bb9a84021f867b4b2259890d79cd667ee66eeccd4c3c1b0a158ff" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2f6e0e895b98be8474e41f687179f69aaa2de9243a7920581faf1a90dedd9708" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="756f0e954632c945d36d1dd7d90cf1e120a05cd87bf4ae1a2a9b7c81db1c16ef" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fb7cc53aa2d3359dad1f51c137550c3abfa25bee20785bed0a14e2ee76eb1d19" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7b10137bb50982ffc4e08a478465deaa8534f38863ef4cac3c0bebb856d24a3" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d1b21c22eca60aa30e903e821ce5ed0d0227b99e57cc1cd55062af5388021ffc" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="f44db1bca38cfe0123f958fbc47437d8f0db2ca68ffcaf244b78f4138a508fe5" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d8805fabe644fe46198412838381a8dae9565eb714678f7ef4edde8d6c2087b8" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="9c47f82645b0c982b94f45a2e0b6815b5264a84c8b5829be814c1e45c57e6c02" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4b1e0dc9acc08eaf9802088d98c5b31e9dc1a09c5f6f8e3e88e6dee28766f0ba" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3c0a81a6efde0f6a5a0b916cf7d64d15b716f94cde31d7262fbca5e9d58de0e8" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0e13e71326dc905f27a4bd50adb07f084402a7f52e2122aac58d41849789862f" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4b4bf319a9a47afe8ad299cbb36bb8caf96346f34c21f8eee048332daa6d6b65" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d892262f34fd4a3fa904be680cc0c8bf895d64614a3f8c00571c1189f37a7779" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="4de8ef7f81b69835885eee666640beba25a2ff7f33598f60a736ea801d77f165" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="40e0a4b545d2a026cd57e66955dbdaae572596e7faca3b964d18ed30efaf068c" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ead20acf9e3cb48a7516465bcfd216cbad765f3ca95ecc61f60d033e3af35a0b" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7b566fe65b87a8b038b51d1ad884ccd85f8cfdab0e6a0c17fe0695afdde3ec54" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a2a82a1762fd9358b8561a8759f3e1ad50c873bd6c0d8d9a981ea6b0b38abc1a" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9e58dc0d0a3ecf948c94d17abc2ad3fc41b6dadad24c78fcf0c230c361434e13" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="e4744a1675dda73fd566a5ae7cb4bef06c5dae1082174951e65aeaae3c797af6" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bcafcfba411c2b9916886371326fe7fa2d4d645bd379faa444371267a70ee9e4" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="345b4cad61e13346efd7874c6570a352bb969f0e6ad53201a71bbab809a33fa9" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ea53aa335db6c8903277929586943ad4d16e849a13f9ad6fed461b95fb8289ea" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="858132db3f8fcb422e0eb84e2936f28bf9f504266927ac7250e9827482e9777c" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7b2b57d9118e2675d05ceb263742cf6f35572c65ecc9f481716e5e0c339b87ef" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="18a6896b3c69076ec1e14754151f35dbcfd494a151bfde2055929177e9bdf22b" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="07d4d1dc59e388955d6314caf33fafcccb6745b6af767d2a481e53137b44a52e" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="dce5ad28e3b3cd093b592526b89693f9371442accfdf15fef70822d112144d70" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9d2001e3eb2b90474536369adb53db925b3fff5726a5a9b673419115496ea0e7" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="b1d8658e18e9588411b73f8c683632059e64118d3ab9b85045c5feee961554b4" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="07963f6051dce5a58bb6e9f6af2246de136ef05e8608b868939e2aec299c6ffd" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="338f81636019883290222757032d2a467afdd4bba1540672d29e487a99ea4c2f" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="762e9e52e7761c1e7a6f37e21e34841c15991125d826a1b8a0ccd53d78887024" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8a388cb4989d1caa722b1d2f480b10c54a5fe92229650a4ee0b865f6fde1eb40" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="9cd37590c8079b98c13b05e0c78acad4f62264089e5242cd3269d31fa6c97b10" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="5bc071268467fa3a678942c0f1bd82278e95eaa442931a52eb3f886b842074bc" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="7cfd2ac6c34ad547f757b2a84bdb2df6d6923ade34c5f5856313c52181ee3f2d" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="0d4f6756520527c6c76e6620deebd49648ee8fa4ebee4907b5322f2b9c3eb9fd" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="93d6891042a102853422b645faa1410d748c93f1d78cd2b4d12569c067bd3520" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a3f06c075d210d6e21eb4aa59d02b4af14d2e7fca678323009850c0a6941dbe" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="06d232b921bc29b0ad941ca2196fa317f90cf878071123543856c9e1b83b8ba6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2c5465917be26d9e6033dc28dac9b1c2910101584bd936d3c27deb96e635a674" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="180bee8d1fd7c69723ad3d676578edfbce6e75a95125310e102cc18179b9ecfa" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="19797aed268d49f637d53a42c6af6b23d11fb51f97fa670f85c33ed30844fa01" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="917848c07794d550ff1a6c894fddc259d52c26e63c42675baed09b1565a3ba15" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="b6ed354071d392fd31651d2c37a77f6ea8cc54c4584e1c7761d97d239a33f7fc" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="af1db133263b6fc41493ffead3345f82c9ff93551097b285a1a4270452cbc316" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a1f30998e870c778604e664b73b5fc2014757836dbc94d3be212b39e42f9326c" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7cdd64c7ac0d2b720f1ff6a74501b79c22933ca2d994b78d2a18dd40fcb1083" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e28a5a185a15b5845abd91e6bc93518d8c5183eac47e5f2fb5428c5b029eb7af" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6adbca70826bdf3641e934448d8cd63f4e53dadc24e9c2c5c0dc0c744bdcf598" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b019a281bd4fa57bd1b4af5c0b590355bfc5f79b5054e364793224edf0c241ff" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="b7dd5f80958f4decac38eab30385598b0567b40bfc447ca936b64e8e189d7f6e" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ad1b6a19e9047ed0bf38bb307cd3598456387b1a3f0dd1442530f3a7999e75c4" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="9a92b51555ebbdca1246d5e009bb385015fafecd229a51e5f964c43ba265ff22" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a302359d59603e03f4e95b457795d55661bca8b4661c33858873008831c769b1" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6766ecd41fdf367943d70d3e0a88b5320d4d3909ee591e298b28a04df2a0a8b1" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fd7719bf86b2da62376637af0c49f7f3fcc277aea3f72d1f166ecdde06be9181" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="95fc589c6d348f9f9dc5d2f20d5719bd1f37824eef1351f81266a08597301dd0" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="900a292ae8ad2685b1fa97db8831c41125af2d8695fb37de2f147a74c8f6a5a4" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="74de89eb67442cd605639e0815f386eaac7a3e2487c5c90e8daa8f9a0075e4fe" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="3ffeface111699ef28558326b5fb26a01a5749382ad8197d70ba9b2c65d3a6e8" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2ae3fbd82c137d9ddb62c986706dd4530b9125f6516696149323ad749ee1fb9b" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3920626d14c89571ac37536a458a083d8ab0e4fd818d9ba8af7191fef867ecf1" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bc69712ccdfdc24200cc783f867a326bde5ec6d3b8007eceab2ded2f17d0ff0b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="339abe7837068c9967c7e310edf59d263cd2073c52e5e539376cf3d25f4c539f" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="df733e66d6bb88da38263053d797cba11fd473ed8f6e5335036b0fa98a6264b3" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="8ce226d9e3647e7778abebafb0458ae451549b3ccb092b508b1acce3b9c1535f" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="1cf2e199baf618e265fbc6fb19c42798e2da613a8c113fa9c6dad8f21f8bbb41" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="dcd869e668932115711369aaf5c23ca78c58252fea57e123df4d0218b5d6bd1e" name="chrony" arch="aarch64">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="2917844f65e49c6d426dcdfc5b40b732bd5e3053c80e392d4cc00aaebe3c597b" name="chrony" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="a8435e4f30faabae3e4a183476444bcc1f418f7f1050648f11de743840770677" name="chrony" arch="s390x">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="27268f3e76fea3fc9f9432eb543e6fb8af2daf1d3679f257aeee343488f4680a" name="chrony" arch="src">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="b5ec7fafb382136f8399d6bcf6e5f5ac2449fafac26b421a0f7d29d8410a5e2f" name="chrony" arch="x86_64">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="b36ed40e54e1689f520a61ebfb5167577b542dea7534448bd674b75bebd14406" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="294e582ea022c53dc759f6c6fd3581897ad022be3d39294fc8eae26bbc055a4b" name="chrony-pool-openSUSE" arch="noarch">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="b115cffb7773a55ab86891563823b1dc5f3b4617a15837e5f7125f45108c67d7" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="3.2" rel="9.24.2"/>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="mpluskal@suse.com" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="max@suse.com" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="max@suse.com" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="max@suse.com" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="max@suse.com" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="max@suse.com" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
  <changelog author="max@suse.com" date="1617883200">- boo#1162964, bsc#1183783, clknetsim-glibc-2.31.patch:
  Fix build with glibc-2.31
- bsc#1184400, chrony-pidfile.patch:
  Use /run instead of /var/run for PIDFile in chronyd.service.</changelog>
  <changelog author="max@suse.com" date="1621771200">- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
</package>
<package pkgid="2b2b2d6e820e76ea90c9236373293d33caf7114bc2d2fda3f40fef0e0fd0758b" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="fcbb2af854e3d5423e7d8a0b2f1d951267831299be177e45065d7cb754c6adab" name="clamav" arch="ppc64le">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="d0fde9314355c58a1e7ae4a0186833a7acd7b0a56d2d1fc35a83c008fe3f3fe3" name="clamav" arch="s390x">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="8f57ee70ffb8eca7893ffc6b4bca9684a2f64d1ef78eb10ed109c7e8fd0653e2" name="clamav" arch="src">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="8d0945856ce04e858917b4f28ecfcfa67ae7a3e04e925e873f57d6f4c5ea3b9a" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="b3e04d8599b17490b7a0a66d48724c35deac4ac4588d5a8c48ff2779edc0acd7" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="7abbfef6f7f0f3b002fc8143a0cb2c35c983498a2b5ee6f38ae226271d459d51" name="clamav-devel" arch="ppc64le">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="4fca336ce270ac84f3f5c8a8afa282319cf4aee3b6ba719f7d02f94903b8ddff" name="clamav-devel" arch="s390x">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="10396a5357ad51c1309a6623fcaca68ce3b547002584ac14a3c412ebe77e2903" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="367fcb84df42b181b5b02a2c71dd9b39d4f92072678f5d340a16caf3412f9c7c" name="clippy" arch="aarch64">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="a66300869509d5b2c8aa2000acb8bc10616bb3ef1a907b5a6b6a26078322208b" name="clippy" arch="ppc64le">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="f4c05f4aed00d3387681e5dbb9c6e2ecad13c22699fd4bdbb69c1f4386ce29de" name="clippy" arch="s390x">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="1dcd5135ff7d6035390239a999c108ceff6d1fd873af72a9d847c5f472104862" name="clippy" arch="x86_64">
  <version epoch="0" ver="1.43.1" rel="15.1"/>
  <changelog author="luke@ljones.dev" date="1569844800">- Update to version 1.38.0
  + Language
  - The `#[global_allocator]` attribute can now be used in submodules.
  - The `#[deprecated]` attribute can now be used on macros.
  + Compiler
  - Added pipelined compilation support to `rustc`. This will
    improve compilation times in some cases.
  + Libraries
  - `ascii::EscapeDefault` now implements `Clone` and `Display`.
  - Derive macros for prelude traits (e.g. `Clone`, `Debug`, `Hash`) are now
    available at the same path as the trait. (e.g. The `Clone` derive macro
    is available at `std::clone::Clone`). This also makes all built-in macros
    available in `std`/`core` root. e.g. `std::include_bytes!`.
  - `str::Chars` now implements `Debug`.
  - `slice::{concat, connect, join}` now accepts `&amp;[T]` in addition to `&amp;T`.
  - `*const T` and `*mut T` now implement `marker::Unpin`.
  - `Arc&lt;[T]&gt;` and `Rc&lt;[T]&gt;` now implement `FromIterator&lt;T&gt;`.
  - Added euclidean remainder and division operations (`div_euclid`,
    `rem_euclid`) to all numeric primitives. Additionally `checked`,
    `overflowing`, and `wrapping` versions are available for all
    integer primitives.
  - `thread::AccessError` now implements `Clone`, `Copy`, `Eq`, `Error`, and
    `PartialEq`.
  - `iter::{StepBy, Peekable, Take}` now implement `DoubleEndedIterator`.
  + Stabilized APIs
  - `&lt;*const T&gt;::cast`
  - `&lt;*mut T&gt;::cast`
  - `Duration::as_secs_f32`
  - `Duration::as_secs_f64`
  - `Duration::div_f32`
  - `Duration::div_f64`
  - `Duration::from_secs_f32`
  - `Duration::from_secs_f64`
  - `Duration::mul_f32`
  - `Duration::mul_f64`
  - `any::type_name`
  + Cargo
  - Added pipelined compilation support to `cargo`.
  - You can now pass the `--features` option multiple times to enable
    multiple features.
  + Misc
  - `rustc` will now warn about some incorrect uses of
    `mem::{uninitialized, zeroed}` that are known to cause undefined behaviour.</changelog>
  <changelog author="luke@ljones.dev" date="1569844801">- Add patch add-option-to-allow-warnings.patch to add a config option
  which allows warnings and so enables v1.38 to bootstrap itself.</changelog>
  <changelog author="rhafer@suse.com" date="1571832000">- Switch to bundled version of libgit2 for now. libgit2-sys seems
  to expect using the bundled variant, which just seems to point
  to a snapshot of the master branch and doesn't match any released
  libgit2 (bsc#1154817).
  See: https://github.com/rust-lang/rust/issues/63476 and
  https://github.com/rust-lang/git2-rs/issues/458 for details.</changelog>
  <changelog author="aplanas@suse.com" date="1573128000">- Update to version 1.39.0
  + Language
  - You can now create async functions and blocks with async fn,
    async move {}, and async {} respectively, and you can now call
    .await on async expressions.
  - You can now use certain attributes on function, closure, and
    function pointer parameters.
  - You can now take shared references to bind-by-move patterns in
    the if guards of match arms.
  + Compiler
  - Added tier 3 support for the i686-unknown-uefi target.
  - Added tier 3 support for the sparc64-unknown-openbsd target.
  - rustc will now trim code snippets in diagnostics to fit in your
    terminal.
  - You can now pass --show-output argument to test binaries to
    print the output of successful tests.
  + For more details:
    https://github.com/rust-lang/rust/blob/stable/RELEASES.md#version-1390-2019-11-07
- Drop patches already merged in upstream:
  + rust-61206-assume-tarball-llvm-is-fresh.patch
  + add-option-to-allow-warnings.patch</changelog>
  <changelog author="aplanas@suse.com" date="1573214400">- Add hopefully-fix-rustdoc-build.patch to fix rustdoc compilation</changelog>
  <changelog author="aplanas@suse.com" date="1574683200">- Re-format the spec file
- Add a README to explain the update process
- Add _service file for download the assets and re-base the patches</changelog>
  <changelog author="ngompa13@gmail.com" date="1575028800">- Rename README to README.suse-maint and add it as a source
  to stop factory-auto from declining submissions automatically</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1577707200">- Rebased patches:
  + hopefully-fix-rustdoc-build.patch dropped (merged upstream)</changelog>
  <changelog author="luke@ljones.dev" date="1577707201">- Update to version 1.40.0
  + Language
  - You can now use tuple `struct`s and tuple `enum` variant's constructors in
    `const` contexts. e.g.
    pub struct Point(i32, i32);
    const ORIGIN: Point = {
    let constructor = Point;
    constructor(0, 0)
    };
  - You can now mark `struct`s, `enum`s, and `enum` variants with the `#[non_exhaustive]` attribute to
    indicate that there may be variants or fields added in the future.
    For example this requires adding a wild-card branch (`_ =&gt; {}`) to any match
    statements on a non-exhaustive `enum`.
  - You can now use function-like procedural macros in `extern` blocks and in
    type positions. e.g. `type Generated = macro!();`
  - Function-like and attribute procedural macros can now emit
    `macro_rules!` items, so you can now have your macros generate macros.
  - The `meta` pattern matcher in `macro_rules!` now correctly matches the modern
    attribute syntax. For example `(#[$m:meta])` now matches `#[attr]`,
    `#[attr{tokens}]`, `#[attr[tokens]]`, and `#[attr(tokens)]`.
  + Compiler
  - Added tier 3 support\* for the
    `thumbv7neon-unknown-linux-musleabihf` target.
  - Added tier 3 support for the
    `aarch64-unknown-none-softfloat` target.
  - Added tier 3 support for the `mips64-unknown-linux-muslabi64`, and
    `mips64el-unknown-linux-muslabi64` targets.
  + Libraries
  - The `is_power_of_two` method on unsigned numeric types is now a `const` function.
  + Stabilized APIs
  - BTreeMap::get_key_value
  - HashMap::get_key_value
  - Option::as_deref_mut
  - Option::as_deref
  - Option::flatten
  - UdpSocket::peer_addr
  - f32::to_be_bytes
  - f32::to_le_bytes
  - f32::to_ne_bytes
  - f64::to_be_bytes
  - f64::to_le_bytes
  - f64::to_ne_bytes
  - f32::from_be_bytes
  - f32::from_le_bytes
  - f32::from_ne_bytes
  - f64::from_be_bytes
  - f64::from_le_bytes
  - f64::from_ne_bytes
  - mem::take
  - slice::repeat
  - todo!
  + Cargo
  - Cargo will now always display warnings, rather than only on
    fresh builds.
  - Feature flags (except `--all-features`) passed to a virtual workspace will
    now produce an error. Previously these flags were ignored.
  - You can now publish `dev-dependencies` without including
    a `version`.
  + Misc
  - You can now specify the `#[cfg(doctest)]` attribute to include an item only
    when running documentation tests with `rustdoc`.
  + Compatibility Notes
  - As previously announced, any previous NLL warnings in the 2015 edition are
    now hard errors.
  - The `include!` macro will now warn if it failed to include the
    entire file. The `include!` macro unintentionally only includes the
    first _expression_ in a file, and this can be unintuitive. This will become
    either a hard error in a future release, or the behavior may be fixed to include all expressions as expected.
  - Using `#[inline]` on function prototypes and consts now emits a warning under
    `unused_attribute` lint. Using `#[inline]` anywhere else inside traits
    or `extern` blocks now correctly emits a hard error.</changelog>
  <changelog author="federico@suse.com" date="1578484800">- Bump version of libssh2 for SLE15; we now need a version with
  libssh2_userauth_publickey_frommemory(), which appeared in libssh2
  1.6.0.
- Use the bundled libssh2 prior to SLE15.  SLE12 has 1.4.3, which is
  too old for the ssh crate now.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579262400">- Adjust constraints: Request 20GB HDD for all archs. Simplify the
  file by removing the overrides for various disk sizes. All archs
  are curretnly at roughly 17GB storage in use.</changelog>
  <changelog author="federico@suse.com" date="1584964800">- Update to version 1.41.1:
  - Always check types of static items
  - Always check lifetime bounds of `Copy` impls
  - Fix miscompilation in callers of `Layout::repeat`
- Update to version 1.41.0:
  + Language
  - You can now pass type parameters to foreign items when implementing
    traits. E.g. You can now write `impl&lt;T&gt; From&lt;Foo&gt; for Vec&lt;T&gt; {}`.
  - You can now arbitrarily nest receiver types in the `self` position. E.g. you can
    now write `fn foo(self: Box&lt;Box&lt;Self&gt;&gt;) {}`. Previously only `Self`, `&amp;Self`,
    `&amp;mut Self`, `Arc&lt;Self&gt;`, `Rc&lt;Self&gt;`, and `Box&lt;Self&gt;` were allowed.
  - You can now use any valid identifier in a `format_args` macro.
    Previously identifiers starting with an underscore were not allowed.
  - Visibility modifiers (e.g. `pub`) are now syntactically allowed on trait items and
    enum variants. These are still rejected semantically, but
    can be seen and parsed by procedural macros and conditional compilation.
  + Compiler
  - Rustc will now warn if you have unused loop `'label`s.
  - Removed support for the `i686-unknown-dragonfly` target.
  - Added tier 3 support\* for the `riscv64gc-unknown-linux-gnu` target.
  - You can now pass an arguments file passing the `@path` syntax
    to rustc. Note that the format differs somewhat from what is
    found in other tooling; please see the documentation for
    more information.
  - You can now provide `--extern` flag without a path, indicating that it is
    available from the search path or specified with an `-L` flag.
    Refer to Rust's [platform support page][forge-platform-support] for more
    information on Rust's tiered platform support.
  + Libraries
  - The `core::panic` module is now stable. It was already stable
    through `std`.
  - `NonZero*` numerics now implement `From&lt;NonZero*&gt;` if it's a smaller integer
    width. E.g. `NonZeroU16` now implements `From&lt;NonZeroU8&gt;`.
  - `MaybeUninit&lt;T&gt;` now implements `fmt::Debug`.
  + Stabilized APIs
  - `Result::map_or`
  - `Result::map_or_else`
  - `std::rc::Weak::weak_count`
  - `std::rc::Weak::strong_count`
  - `std::sync::Weak::weak_count`
  - `std::sync::Weak::strong_count`
  + Cargo
  - Cargo will now document all the private items for binary crates
    by default.
  - `cargo-install` will now reinstall the package if it detects that it is out
    of date.
  - Cargo.lock now uses a more git friendly format that should help to reduce
    merge conflicts.
  - You can now override specific dependencies's build settings. E.g.
    `[profile.dev.package.image] opt-level = 2` sets the `image` crate's
    optimisation level to `2` for debug builds. You can also use
    `[profile.&lt;profile&gt;.build-override]` to override build scripts and
    their dependencies.
  + Misc
  - You can now specify `edition` in documentation code blocks to compile the block
    for that edition. E.g. `edition2018` tells rustdoc that the code sample
    should be compiled the 2018 edition of Rust.
  - You can now provide custom themes to rustdoc with `--theme`, and check the
    current theme with `--check-theme`.
  - You can use `#[cfg(doc)]` to compile an item when building documentation.
  + Compatibility Notes
  - As previously announced 1.41.0 will be the last tier 1 release for 32-bit
    Apple targets. This means that the source code is still
    available to build, but the targets are no longer being tested and release
    binaries for those platforms will no longer be distributed by the Rust project.
    Please refer to the linked blog post for more information.</changelog>
  <changelog author="alarrosa@suse.com" date="1585656000">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="alarrosa@suse.com" date="1585656001">- Update to version 1.42.0:
  + Language
  - You can now use the slice pattern syntax with subslices.
  - You can now use #[repr(transparent)] on univariant enums. Meaning
    that you can create an enum that has the exact layout and ABI of
    the type it contains.
  - There are some syntax-only changes:
  * default is syntactically allowed before items in trait
    definitions.
  * Items in impls (i.e. consts, types, and fns) may syntactically
    leave out their bodies in favor of ;.
  * Bounds on associated types in impls are now syntactically
    allowed (e.g. type Foo: Ord;).
  * ... (the C-variadic type) may occur syntactically directly
    as the type of any function parameter.
    These are still rejected semantically, so you will likely receive
    an error but these changes can be seen and parsed by procedural
    macros and conditional compilation.
  + Compiler
  - Added tier 2 support for armv7a-none-eabi.
  - Added tier 2 support for riscv64gc-unknown-linux-gnu.
  - Option::{expect,unwrap} and Result::{expect, expect_err, unwrap,
    unwrap_err} now produce panic messages pointing to the location
    where they were called, rather than core's internals.
    Refer to Rust's platform support page for more information on
    Rust's tiered platform support.
  + Libraries
  - iter::Empty&lt;T&gt; now implements Send and Sync for any T.
  - Pin::{map_unchecked, map_unchecked_mut} no longer require the
    return type to implement Sized.
  - io::Cursor now derives PartialEq and Eq.
  - Layout::new is now const.
  - Added Standard Library support for riscv64gc-unknown-linux-gnu.
  + Stabilized APIs
  - CondVar::wait_while
  - CondVar::wait_timeout_while
  - DebugMap::key
  - DebugMap::value
  - ManuallyDrop::take
  - matches!
  - ptr::slice_from_raw_parts_mut
  - ptr::slice_from_raw_parts
  + Cargo
  - You no longer need to include extern crate proc_macro; to be
    able to use proc_macro; in the 2018 edition.
  + Compatibility Notes
  - Error::description has been deprecated, and its use will now
    produce a warning. It's recommended to use Display/to_string
    instead.</changelog>
  <changelog author="schwab@suse.de" date="1586260800">- Avoid duplication of environment settings</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1588161600">- Update to version 1.43.0
  + Language
  - Fixed using binary operations with `&amp;{number}` (e.g. `&amp;1.0`)
    not having the type inferred correctly.
  - Attributes such as `#[cfg()]` can now be used on `if`
    expressions.
  - Syntax only changes:
  * Allow `type Foo: Ord` syntactically.
  * Fuse associated and extern items up to defaultness.
  * Syntactically allow `self` in all `fn` contexts.
  * Merge `fn` syntax + cleanup item parsing.
  * `item` macro fragments can be interpolated into `trait`s,
    `impl`s, and `extern` blocks.
    For example, you may now write:
    ```rust
    macro_rules! mac_trait {
    ($i:item) =&gt; {
    trait T { $i }
    }
    }
    mac_trait! {
    fn foo() {}
    }
    ```
  * These are still rejected *semantically*, so you will likely
    receive an error but these changes can be seen and parsed by
    macros and conditional compilation.
  + Compiler
  - You can now pass multiple lint flags to rustc to override the
    previous flags.
    For example; `rustc -D unused -A unused-variables` denies
    everything in the `unused` lint group except `unused-variables`
    which is explicitly allowed. However, passing
    `rustc -A unused-variables -D unused` denies everything in
    the `unused` lint group **including** `unused-variables` since
    the allow flag is specified before the deny flag (and therefore
    overridden).
  - rustc will now prefer your system MinGW libraries over its
    bundled libraries if they are available on `windows-gnu`.
  - rustc now buffers errors/warnings printed in JSON.
  + Libraries
  - `Arc&lt;[T; N]&gt;`, `Box&lt;[T; N]&gt;`, and `Rc&lt;[T; N]&gt;`, now implement
    `TryFrom&lt;Arc&lt;[T]&gt;&gt;`,`TryFrom&lt;Box&lt;[T]&gt;&gt;`, and `TryFrom&lt;Rc&lt;[T]&gt;&gt;`
    respectively.
  * *Note** These conversions are only available when `N` is
    `0..=32`.
  - You can now use associated constants on floats and integers
    directly, rather than having to import the module.
    e.g. You can now write `u32::MAX` or `f32::NAN` with no imports.
  - `u8::is_ascii` is now `const`.
  - `String` now implements `AsMut&lt;str&gt;`.
  - Added the `primitive` module to `std` and `core`.
    This module reexports Rust's primitive types. This is mainly
    useful in macros where you want avoid these types being shadowed.
  - Relaxed some of the trait bounds on `HashMap` and `HashSet`.
  - `string::FromUtf8Error` now implements `Clone + Eq`.
  + Stabilized APIs
  - `Once::is_completed`
  - `f32::LOG10_2`
  - `f32::LOG2_10`
  - `f64::LOG10_2`
  - `f64::LOG2_10`
  - `iter::once_with`
  + Cargo
  - You can now set config `[profile]`s in your `.cargo/config`,
    or through your environment.
  - Cargo will now set `CARGO_BIN_EXE_&lt;name&gt;` pointing to a
    binary's executable path when running integration tests or
    benchmarks.
    `&lt;name&gt;` is the name of your binary as-is e.g. If you wanted
    the executable path for a binary named `my-program`you would
    use `env!("CARGO_BIN_EXE_my-program")`.
  + Misc
  - Certain checks in the `const_err` lint were deemed unrelated
    to const evaluation, and have been moved to the
    `unconditional_panic` and `arithmetic_overflow` lints.
  + Compatibility Notes
  - Having trailing syntax in the `assert!` macro is now a hard
    error. This has been a warning since 1.36.0.
  - Fixed `Self` not having the correctly inferred type. This
    incorrectly led to some instances being accepted, and now
    correctly emits a hard error.</changelog>
  <changelog author="schwab@suse.de" date="1588593600">- Update rustfmt_version</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589457600">- Update to version 1.43.1
  - Updated openssl-src to 1.1.1g for CVE-2020-1967.
  - Fixed the stabilization of AVX-512 features.
  - Fixed `cargo package --list` not working with unpublished
    dependencies.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="dmueller@suse.com" date="1612440000">- build 32bit arches llvm without debuginfo to avoid oom during build (bsc#1181571)</changelog>
</package>
<package pkgid="fa24500ef0c43601b25ee490497264eee9a2d328b54b9ccaa0be8f7fe1640251" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="6b4bad1c398297c331c42609f3a995a8ee5f773d8a843811e2f52a0294d41831" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="4dee03f152e62c9d5f5ed4e83195ea89ca9d9c4e94086727bbd800ef79282139" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="adbf66f38279ac3e5151faad84f02d88770e58fe1ac3e4f6d66c5a25f71d5562" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="87730c4d70308100471c158cefa87e930aa2db60eb3ce355916eb3c68e0fc2e2" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="3e8978a70b679364fea33a5bca1488b3984ba0f2e770d2a4bf7bf387376ad983" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="a8c57ae26d5e2130da826a067c2dd1e3dcba1d534c009450b21509b9f394cd28" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c1a567d022f78eb370f713fb4c8b6b3d77f1bc56f8313a486e72eca2f908d63a" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="64b6055a38b6237aec956b4c9a9bfff4506b0d06eb00424d4cdf00ef57fca2ef" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="34d26c9dc64290740d5e781e2814f678a92f41ccefbfe645d04bff0fa4cdf88d" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="7c5ef5ce12932ae1269198d3fd1a2ed0733954147ced703d546b9526592a677b" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="539f3a1cc1936a619004753b885c0011a85b085224a826a0bf0de8635280d24d" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="a8f0c30619004310103e185b57b5793c47e63fcd986cac3270571a60585413e3" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="8603783752f825838ec3a7c02d86e18baa463438bbf6c815ae2576a650f60313" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="8b152e189a328699a4b7e7bc58aa85172320075bfd9f1bd6088e7f7c339ed150" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="a1b787e5ea2435e8e8303acda63a26c2630a4b51d6b3fb80743f8e9d88797f1d" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="89dcf4bed409df845516b03f27f1774a21f36801e3045b00dab64c31fdf74bc2" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="e196c265e663c9f346682c4500f0e94a076969a0638cbeeec9e8f50cbba186db" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="23b144959a6c54855b574a5cdb1cafb38dfb054fea2459e25d192f40ddc95022" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="484d47ccd9cef0d63d9fe48288f60780798d9a689718c26eeb312afc6045432a" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="4df398af8f917ba4fa66f1e8e37c0b3a7e83716e902fe53b51ecdaee172aa59a" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="dc32d295be96c301b3d0875c906ad845235ebada21a6f12ee377bf3c686426a9" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="9f9c8d067182a7c3c37e4d744848a2997cdeaba29d4a8206567f7e196abdb23c" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="141e0b038609d33d307b1c5894a32004ebc4505cfb90b12810270542eee462d0" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="96b538029faa86b7ab74b0b36eaf7a2f6beffc868701871e2877f1a7c96f6cba" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="86100c96e1627794c7374b7aeebf14d797ea8c0c00836660e47de3ab285dcd94" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="ea8f06d5996253028f6d494c7b5e42b559c45390f654038c2f24f2c71dfb7cd2" name="containerd" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="a11504731b0b469210e0a1d4fa1ed45e2b00d68b2c1b7f6196eee9e1596f7f07" name="containerd" arch="src">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="eabcdbd1d0fc669c3475c63f02f979b3e281737bf1241ea421ca4d2b4d86431b" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="144fcbdec4436a36d25f37d705e7ea5d2b01501491e55ee8fc040a26ef5a917d" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="06ec9b5244d5330e39e4d20aacc3cf854f84e2b3477b45cb0304630547e2d004" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="6daef601203a00d4c038bf26272f889e6d5dbfed37615b030daa80d76bcb0f90" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="ad90b67ccc792b680e663e9248bd675d70d7553ac3d406c8b5d551c65ea7430e" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1532520000">- Update to containerd v1.1.1, which is the required version for the Docker
  v18.06.0-ce upgrade. bsc#1102522
- Add backport of https://github.com/containerd/containerd/pull/2534 to make
  the man page no longer pollute the global namespace.
  + 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch
- Remove the following patch since it has already been merged upstream.
  - bsc1065109-0001-makefile-add-support-for-build_flags.patch
- Remove systemd-related files and add docker-containerd-* symlinks; this
  aligns with the upstream defaults where dockerd will execute
  docker-containerd. Version upgrades of docker are expected to work more
  smoothly as much of the upgrade logic is implemented in dockerd.
- Add containerd-rpmlintrc (or containerd-kubic-rpmlintrc) to deal with
  /usr/src/containerd/* rpmlint errors (which don't affect normal users of this
  package).</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="asarai@suse.com" date="1534939200">- Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce.
  bsc#1102522</changelog>
  <changelog author="asarai@suse.com" date="1541419200">- Add backport of https://github.com/containerd/containerd/pull/2764, which is
  required for us to build containerd on i586 SLE-12 (where /bin/sh doesn't
  like emoji in shell scripts). bsc#1102522 bsc#1113313
  + 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="clee@suse.com" date="1545307200">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="sgrunert@suse.com" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="asarai@suse.com" date="1549368000">- Update to containerd v1.2.2, which is required for Docker v18.09.1-ce.
  bsc#1124308
  * Fix rare deadlock on FIFO creation with timeout
  * Fix a bug that a container can't be stopped or inspected when its
    corresponding image is deleted
  * Fix a bug that the cri plugin handles containerd events outside of
    k8s.io namespace
  more changes at:
  https://github.com/containerd/containerd/releases/tag/v1.2.2
  Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.1
    https://github.com/containerd/containerd/releases/tag/v1.2.0
    https://github.com/containerd/containerd/releases/tag/v1.1.4
    https://github.com/containerd/containerd/releases/tag/v1.1.3
- Remove required_dockerrunc commit pinning, as it just lead to issues.
- Remove upstreamed patches.
  - 0001-docs-man-rename-config.toml-5-to-be-more-descriptive.patch</changelog>
  <changelog author="sgrunert@suse.com" date="1553169600">- Update containerd to v1.2.4
  * cri: Set /etc/hostname
  * cri: Fix env performance issue
  * runc updated to 6635b4f0c6af3810594d2770f662f34ddc15b40d to solve
    bsc#1121967 CVE-2019-5736
  * cri updated to da0c016c830b2ea97fd1d737c49a568a816bf964
  * Windows: NewDirectIOFromFIFOSet
  * Changelogs from previous versions also included in this update:
    https://github.com/containerd/containerd/releases/tag/v1.2.3</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to containerd v1.2.5, which is required for v18.09.5-ce.
  bsc#1128376 boo#1134068
  https://github.com/containerd/containerd/releases/tag/v1.2.5</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="d5735e5c1635160fc64cd8755943ddc75c15d5e6f76837bb25d71030dff0c5f4" name="cpp" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="9233ae3a335b2132ddf7d75693ca1416a2d34bb840b5b8f8baf383523bd1ebcf" name="cpp" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="49398aa7d55893bb47f09c9d6f8d8919a62838057144320f270a3d2ce69fc1a2" name="cpp" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="980aa013f1973bd3585afe0802e6ec0fdb9d7dca03b60dd9f704056b1f78aa07" name="cpp" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="e53e0b0c96fbba03c6a3fc8b19967b3ae9c13757e6ea0f6a18243e460e8510ae" name="cpp10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af4f7c1ffaae6824b9a99c67e8cdd3a3121d79e29f125adcd724b41daac8a743" name="cpp10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9f1ba442fc57814b7317375ca1f1f56af0c100d67a923e440ec70b563df966ef" name="cpp10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="154daf68c1602511cf8db63e5af58d278d083ae6259c7c4969b450ccb0f34356" name="cpp10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4ccb6b8992982cc4fdf126a895737db173e4f3f64d8bf1e2a0074c06966cec66" name="cpupower" arch="aarch64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="ff18b4cbaacb8493a3daac70b029b069656b62b392fe7dd01b72326208a9e7c1" name="cpupower" arch="ppc64le">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="5aada751abcbdfd07eedac99b651c4efa72f35d67cfb1d272d6f726dc2c2c832" name="cpupower" arch="s390x">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="863588fe2f4815fef102bef050213f606a83c88993cb9632e5a474a2dd48971c" name="cpupower" arch="src">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="2dcf6c030284e764da8faf1f5aee51cafebf4135967249df4925bf2936aaec5a" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="f3f0fd4753491bbdd5afb445b09a0f7ee13835a18b45f5c30e6a6b6ae777d177" name="cpupower-bench" arch="aarch64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="d719768d6a742dd8e6492809ff6c3aa628c55ea4e06d5207dbfa2b0af50915ff" name="cpupower-bench" arch="ppc64le">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="7d73c72ee81697ce681aa04954331d9f77d585ab79980d7962d68f961f5b7cda" name="cpupower-bench" arch="s390x">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="4967e9c38218d1425fcec908365984548e97dbc83191659d2265105ec225e065" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="73ca1cf42ba103a8633baeda8d55c662caf34b16f4dc39c858829ca37a9f6e0e" name="cpupower-devel" arch="aarch64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="9a85aa3289f5d5741fcace4fcec421fc76dd101a6277139485a36aaa2447fe90" name="cpupower-devel" arch="ppc64le">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="357c38f2d3cf1fc47f6c579fe095a8092b0e2ed0a3057769ac3d2de503b7e137" name="cpupower-devel" arch="s390x">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="2ba4cf33d5ec348024d63898904fb1af5573bcf788c9a37ef409d9e83cb64013" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="aa2481c7f622fd58d2db2c8acb9579db578765ded74ceb8816cc33e7542ae419" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="54fd5d8a43fbf6807e103f1aec1a4c9390a8f77096f7afae1f4c4352922b497a" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="35c32b7647ecb42416553f9a301f893b4cf50865ced8de221080af351779645d" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="0f5452bcf46a569242cf4c7011a106cc66e67b4eca06b3550773f9ed16b1ed42" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1584100800">- Update to version 4.2.0+git.1584013187.b45cfcb6:
  * Fix: crmsh.spec.in: enable completion of crm command(bsc#1166329)
  * Low: crmsh.spec.in: sync contents from NHF's crmsh.spec file
  * Low: corosync: check whether local ip has already configured
  * Low: bootstrap: check whether init node is online while joining
  * Low: bootstrap: for udpu, don't check join node's ip was in the same network</changelog>
  <changelog author="XLiang@suse.com" date="1585137600">- Update to version 4.2.0+git.1585096577.f3257c89:
  * Low: corosync: Improve qdevice configure process
  * Fix: bootstrap: Change condition to add stonith-sbd resource(bsc#1166967)
  * Fix: bootstrap: use csync2 '-f' option correctly(bsc#1166684)</changelog>
  <changelog author="XLiang@suse.com" date="1590580800">- Add patches:
  - Low: bootstrap: Simplify bootstrap context
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  - High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1594382400">- Update to version 4.2.0+git.1594286044.7a596d12:
  * Low: hb_report: Fix collecting of binary data (bsc#1166962)
  * High: bootstrap: ssh key configuration improvement(bsc#1169581, ECO-2035)
  * High: bootstrap: bootstrap network improvement
  * Low: cibconfig: Avoid adding the ID attribute to select_* nodes
  * High: bootstrap: using class SBDManager for sbd configuration and management(bsc#1170037, bsc#1170999)
  * Low: bootstrap: change ha-cluster-bootstrap log path
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: bootstrap: exit with proper error messages when ssh return failed
  * Low: ui_cluster: use argparse choices to validate -i and -t option
  * Low: corosync: Use with statement  to open file
  * Fix: ui_resource: refresh &lt;Tab&gt; should complete resource first(bsc#1167220)
  * Low: ui_context: give warning if using alias command
  * Low: bootstrap: Simplify bootstrap context
  * Fix: doc: Update man page about completion example of crm resource(bsc#1166644)
- Remove patches:
  * 0001-Low-bootstrap-Simplify-bootstrap-context.patch
  * 0002-High-bootstrap-using-class-SBDManager-for-sbd-config.patch</changelog>
  <changelog author="XLiang@suse.com" date="1595505600">- Update to version 4.2.0+git.1595517298.a06e892f:
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)</changelog>
  <changelog author="XLiang@suse.com" date="1595937600">- Update to version 4.2.0+git.1595940615.c452cc00:
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)</changelog>
  <changelog author="XLiang@suse.com" date="1598356800">- Update to version 4.2.0+git.1598257562.570eb99d:
  * Fix: bootstrap: revert ssh_merge function for compatibility(bsc#1175057)
  * Fix: bootstrap: adjust sbd config process to fix bug on sbd stage(bsc#1175057)</changelog>
  <changelog author="XLiang@suse.com" date="1599739200">- Update to version 4.2.0+git.1599702667.157fc6b5:
  * Low: bootstrap: check whether sbd package installed
  * Low: bootstrap: Improve qdevice configure process * More reasonable naming for variables * More function docstrings * Move function to more reasonable location * Create functions to integrate similar functions inside one * Change big function to small one, more easier for unit test, like: * Refactor functions * Create utils.cluster_run_cmd function to avoid using crm cluster run directly in code(jsc#ECO-1745)
  * Low: bootstrap: swap keys with other nodes when join_ssh(bsc#1176178)</changelog>
  <changelog author="XLiang@suse.com" date="1599825600">- Update to version 4.2.0+git.1599810948.3db12a7a:
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.2.0+git.1600915005.e8089225:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="0061df9e417628cadd8c8e72e497f43a1920212eeb87618e1128337c90d37ee0" name="cross-aarch64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7a3fcf7bb1bf117c21cfe513bb376e8039a2188bbba9574698d4744768e2d24f" name="cross-aarch64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1b6add1004e7967b9b636f3e56854ac187dea18f6f8120efdb904446202f3de0" name="cross-aarch64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3d4009c7289a7650b12698ac964f3694395ab40e968ffed00d901448a77ab48a" name="cross-aarch64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0fd8046fb7c0ad6d85858e6ee4a25a1815ddf18ae74d493041c17c2b2f126b65" name="cross-aarch64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c8e71ae1ad4a3b27b8ce95278c5d2694ba86a1aade3d47004842ef42ed090714" name="cross-aarch64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ff2d4ba47116ef691d72f566de475b221e15270af1aa2b574b8229acecea119b" name="cross-aarch64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b12fba474ec61a71976c7fb264f25a04a55a4a5cee874f8984bab371828bd362" name="cross-arm-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="653676963b65b1e750025a6f78c00b419ab2fa9c9aadbed3f30a8cc2f92c8031" name="cross-arm-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2e8905297c7eb245d8fb9fb6d037fb87423fb46c458fd7edd551f7c11f0cf920" name="cross-arm-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fbb27a892deb19aa26c9ed28883e295190d76a0451693cc28d7425ac8de932ed" name="cross-arm-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c6f667d68b9ec2d1d15d61317754e1c44702b2cb122eebeb8da1a806167a76b3" name="cross-arm-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1ae55fe91467a0946ddc3faa8365d611ca1f299f0263d115d421008afe4f8a03" name="cross-arm-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1fb9123ee7e504fe7a1b510e321b2cfbb7759c18c8a39adf9544825035c3e8ed" name="cross-arm-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c4b50b11f7ffb18f307c1120405c6c5937cd24e2f372a8ffd30eb059ac05e7d8" name="cross-arm-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4ef5d8640b5e38667985ead3350de59cb2609f5480f770fadd886be02c825dbc" name="cross-arm-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="54cb7b5e9a441ce0d81b151796897d31b8aa359191c3499fb3556b19469de4d1" name="cross-hppa-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0fb1065436d3f5edfacf620c39201f9d27f694c12f356cc3293aedfd8a35979e" name="cross-hppa-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6d0fd957bb53348a69c4a9fb36abd27d4b5c5489b1315fe061a60f8f1cc5a6f6" name="cross-hppa-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2de18b8fcfab80d3627cce5f0703e4d0dd7b2ee230d7e5db7a115e72ea11affa" name="cross-hppa-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="91b44e60bdf8aca2b002ae8c14822505377ca38253ed4e6092390ec287695e22" name="cross-hppa-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5602da269a1a24a533330dca26eaa33b98b09bf20d5a0ad813955b4df6d46180" name="cross-hppa-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="841843f993fa228f68135a4d4a33822e6038f2fd5db296b5f0a871eddd4d1814" name="cross-hppa-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="22b1036138560eb6765bcc31f25cba453a9657441aa6d829675013fe10c33d70" name="cross-hppa-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ffbef0a4d0198d2a11b498a823de2fab8fa8735208fa4b590d60a63b4060dd5c" name="cross-hppa-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e3f06da2f50128d5752d3b4714726519655028b314a50116e54ca0a95658ddef" name="cross-i386-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6af794eae0db28f7cbcd09374f2f309d269fcc3d3c37cc2ee17705cb83b40626" name="cross-i386-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="780f944f258b8fab0e0d6e5d43bb3e43a2e429bcaf9597c7306b7d6f6147f998" name="cross-i386-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ed29c512d8afb7cab1bbd08f2e74ede6c0a27357e4561794882f937d1c648385" name="cross-i386-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="43dac4b85ea4057a894cee03bce82a95ca8e02f89f096cf91a1e43764d50a863" name="cross-i386-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2d9fb4d50839247c9b0846b9f3a3a25af8dab8ef629c4f520289c2d2ea5a7b01" name="cross-i386-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3cec72fa9651142df07c8c82c5366848c2db4ecddc4dbc72b20478289b5d63a2" name="cross-i386-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c5f231e3663b3fb019df44082afad9080bfd9a4a1c3ca0df36b2461ef8816f85" name="cross-i386-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b15acd1e82eec851b765c443e5eaa8be2ab299152d55c788445922d1fc74eef6" name="cross-i386-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ad004128ed106920b2d26124c0ef6c748276e849091df470f3ad4cb89e97f15f" name="cross-m68k-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="30198cfdd7384ed0ad3f72eb3c790edcdabfa1b97403c55748ce16f2e664a35e" name="cross-m68k-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fbb03ed05786272164ff0349f7f756c8d936e6be2b81e77b52c6902c7cb6a934" name="cross-m68k-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cb6a7442651a9cb5c7bf0758a0385ebb2aab48fe0dc4d936dc47263024293a8f" name="cross-m68k-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="640a7b20d2d66e70a24a5d7cadcc978b4be1035e8081c5d2f184f8ce6d763191" name="cross-m68k-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4fcb6756de035a78ebd90cdbd5f6adc4afdf0ad2705ad543b912356aff18f246" name="cross-m68k-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bbaf86f55f1b4527771fe86b01b4133cf79eca1f69ebacb1d21ce5aed8e458af" name="cross-m68k-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="02f30945f0901fc3c836c90d9e572eed03475d3a9254d4553bafe2de3adf1c65" name="cross-m68k-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="255236f20e8e670945fb262a5d9753b0dd1b7441946c17dcf119c3e96fb333bc" name="cross-m68k-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f91ebfc39d04887e0723b298fe091994ca5d39d8d8cfae476c2a24be1f11cb3c" name="cross-mips-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="53e6e22747ab803871823e53242c4dbf0d1031866325308d0c49a8f38e57f53e" name="cross-mips-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4870dcb90bde93730f2c2b6dcad27d0effefcfc6c938599518409e2dc6b4f803" name="cross-mips-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="45b878e0e76c694dbe6c6186ee78919b77047b2b23db94d78cf324ac8fa69e3d" name="cross-mips-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="dce3700f83fa210774e243d0e859af70ee8dcd801b7f65e64eb0fbe4e11ea4aa" name="cross-mips-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d3f8abc017b2ed826f8699bf9520fde07cc6aeaf02cc3af3f69f4aa063fa56c4" name="cross-mips-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="870f7f777369b3e6fdd7101ee567ea2acb349869831fd94d127ae3cb30c78319" name="cross-mips-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af9f1814f427cba065119bc9c90d839c3464ee87c504f28e92dee3dfafb825df" name="cross-mips-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="32d65db73565648ec01c836ada95f683d0959a489d10d3ce85b5b40b270a649b" name="cross-mips-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8ac10ff63ce2894f62d0c88e5c2196355b7a41d0ff37b9834a29e9186d63e464" name="cross-nvptx-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="79ee4b241b45b4c33f9621b0c652841f92aad0698659cf6d0fe14656c7f4ac63" name="cross-nvptx-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a2f7ccb4f2699065c434ed6a2bf597fc56062d6ee0c558bb0d964ec999d45762" name="cross-nvptx-newlib10-devel" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f08f15ceaf3c22defd9588f38ea837c1728e8906e4ab311569f25a43ed7e37da" name="cross-ppc64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f4505eecd244450e01784751315914e83c594b41318ffa4895555e2011eb94bd" name="cross-ppc64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="538ec0c617fdd119be3d46fff2eda0ebc8d37bd7cc4fb4eab19950922afc0ada" name="cross-ppc64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5d1e04764bc43040194fc55f1b1ebf780547ff396c3666577eb7e8fb47fadfc6" name="cross-ppc64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9bc3cf4f1166d9b6bf8a2cd0e8febc3c0b069442f85bd3ffadf87531b05181fb" name="cross-ppc64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d1ec90385ae3209b9414bc30a328568990cf02734939b3b6def8f803b38f599c" name="cross-ppc64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e356cdd9ba1c05e582867e69ec3fbb6dd406f0e66bf47040c9ac002a43b4c96b" name="cross-ppc64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d7703a63b2a14bfbecb7a1b446515739e51de900b632690dd4a37619b7ecf4d1" name="cross-ppc64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f5975474d75e4b9c4000e62465ec4083a598bd03f7f7dc176cbfd6fda54a6b56" name="cross-ppc64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="dced17cba01f76a3f0f7784747c835c472b646301d932073e5a1e13bd6202f3c" name="cross-ppc64le-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="731e7f3bce825dbb4e3655d4056db7b8c81d80efdc2e9b0d02901963caeae114" name="cross-ppc64le-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f433010ed82f30dee6c31ec948be559b81714600c4e59318a381c30484f2622f" name="cross-ppc64le-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="63bddbb087ac496806495f198d9bf95bc401dd81f86bac27a68c8242a1b79142" name="cross-ppc64le-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="044fe07105f6be1ca3a74b5972244c564e943b76905256dea851a5724308659f" name="cross-ppc64le-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e602e24cfe2bd6e8b79a57aaf8cae797ea83f8ca826e779fd9579e2afc34046c" name="cross-ppc64le-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="beeeb9439d9d9e093a3ba3d83a8671ad754d36d497802a6161ddb27b76b1539c" name="cross-ppc64le-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c8b4a68d14d859274a9668092045afbab81a95c0dacf177662e14386de05f7f1" name="cross-riscv64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c67c4d0e858f156cce27e145b89849dc867456fc57cafe6a49308ed41fa0533d" name="cross-riscv64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="786055097776f16821d9bcf91a3c468b8c2261c499f8b811688ca1c9155e4d36" name="cross-riscv64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f50fdaff422514f494bdb38c53175ac7774444731fcfe4113e840f8ece8c8b92" name="cross-riscv64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="54b0314098840b23bf3941326d7132b4f3c3d9b484a8cc849f683c29fa4a5c4c" name="cross-riscv64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="eb03f4e7b94f7ffc10e6cbb1e8ba25edeeed6ea2da1a563d9ee3f37d7a232dc5" name="cross-riscv64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2dbb382a8e605aced1bb1f2692e7e02ebd384c12007fe5e4387d7f76489b3860" name="cross-riscv64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="35a681781680fd319442808474cfc0565d401912175db0ea0f0f638ef84c0b95" name="cross-riscv64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9cd3ce081548b0c840a0fb284aeee000fecbd8cb51d3ea1bec0864f112214956" name="cross-riscv64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7807e68344f37d499e1ed8f8eff4bcf80f8a90b60155f02e0692a7f3b101110b" name="cross-s390x-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e3f99a910db101a0774e24bb2aa643f7f013f22f152693cc94721ac931173330" name="cross-s390x-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a9b0c07024880fe0197996a59d1cd1c46dbaae6411a68935eb89d42227f18ba3" name="cross-s390x-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e7163c0fdce18dd2c22b1eb832dcbfad23d1d48bbf0e92cb2a743d23385f99fe" name="cross-s390x-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4eb36e5561f99c26d3a4d010423a6a90bdfb36518df3b54646b502b6b00c10e0" name="cross-s390x-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bd8052f93b016f9e314b79d2572c23a9b66808661c983af68b1216c1b5db8fef" name="cross-s390x-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="084f7f06235803835db2e2c25e0750d6f573b219504d7e72b62178792e9f4d94" name="cross-s390x-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="402fca587ce81ae6baf95ea2ff8a226f494d24d4499e80897605ac322200f068" name="cross-sparc-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="aad8e0cd281ac97021e5155482124278b9b62db3dde9fbf5b7bd352f1a060eb7" name="cross-sparc-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d76d2d5adb8d08fb70889560c45bf6290f815fc0b1e641bea32ef3ba5550b8bb" name="cross-sparc-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e1d5ff4e83a3c732677cd46f33ffc26e4c87988fa9821757cbe19eed4bc0c88c" name="cross-sparc-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7e2f7c43b9bdff5980733bb6d0803362da30d890780c69c5aa05d1afe0bfb846" name="cross-sparc-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="27ce1cf952a1d768d71f05c31c981584325be17988c9d6f1cfe035c5d9cd373b" name="cross-sparc64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="770ad1a84303a6a50dc5ec90fece9f0a2d91096c018bffc0c6abd45d3e247560" name="cross-sparc64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="eaccf33ae2a3ef5ad0f7f27d116ab3fafbd7457b16fdced34883143438caaefb" name="cross-sparc64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="845794429731f85519d28a028459a6b3e4e791ae6e69900c2d318d2faae6c0bc" name="cross-sparc64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a5a0dc80ac1de0290e5c049f15bec9cf05f5af8cf324eb80d4b218e32d9d1ad3" name="cross-sparc64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="61424501639a34f94d68f94075a793d3142b97c6ca29eb8e6dcb490245584f23" name="cross-sparc64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7b37d51308b6b96014c9d3e8221b0ff144cb3c8ade1aeb27db2d50416c9e3be5" name="cross-sparc64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="93521560b361efa9cbc97da58bb1aa2abc67ec39046f4564e3f5a0d8bdfc0976" name="cross-sparc64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a814ed776e380ea629d7febcfb206ca9808c154b01b26e6f4f3812f83aa9cf17" name="cross-sparc64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f955f9ef82ef15660c9666160bb0da4899a032c103bbaf68c8ab8a59e7c2ea26" name="cross-sparcv9-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0ecc60b761d3795e19f3dbd0051916a2711f9e95cd5f3c773bc202c5356f8280" name="cross-sparcv9-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="531cf4b32b7ac131110ff85e541afd0c1a5cd41e5f7d65d4add02c184a686dda" name="cross-sparcv9-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="38437a0bfb3b603bd0654ff0e1a686c2dc458772616c725830d379b93fe78fa7" name="cross-sparcv9-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="481546e40d5b757a675a28bcf0bcc51bb0f889cd1194527d0eda25d403e1e8ac" name="cross-x86_64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6757a1c6f06c20e69046cc5da9e88a82a71c0aeba78495f50fda985ec09faf00" name="cross-x86_64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="88196cd53206a34361575b705bea762dd2711964334af1eaaea84f2ad58a89b7" name="cross-x86_64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f8859fbc5d97f5006a95037ce849396e406afced1293bc298f77d38dc4da3816" name="cross-x86_64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b574b456bedbe2dcfbc6de1892d3e923fcd9724d93231d0972ab0bbca6fb59ae" name="cross-x86_64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="02d325822a04559b00034243d8d7f539c986a3aca217d1a461f2b0aa709705ef" name="cross-x86_64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f350f4f178a300e1762d2c1cf56fa50e54c67ee8f6fbfe7dbea680d487c84940" name="cross-x86_64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="78aa69b2b7ca52b5908b4b37b6dda913dabcb7421fc1d1eb6458d0d31f1473dc" name="cryptctl" arch="ppc64le">
  <version epoch="0" ver="2.4" rel="4.5.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1623412800">- Update to version 2.4:
  * (bsc#1186226) - (CVE-2019-18906) client side password hashing is equivalent to clear text password storage
  * Fix authentication on all places.
  * Fix sysconfig variable name.
  * First step to use plain text password instead of hashed password.
  * Move repository into the SUSE github organization
  * decorate readme with more usage instructions
  * in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
  * Test clear expired commands in TestDB_UpdateSeenFlag
  * tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
  * avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.</changelog>
</package>
<package pkgid="8fdb24fb07fc5651597b6f44db8e0bca9b38498bd3008cfbcece30a2dda7eca9" name="cryptctl" arch="src">
  <version epoch="0" ver="2.4" rel="4.5.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1623412800">- Update to version 2.4:
  * (bsc#1186226) - (CVE-2019-18906) client side password hashing is equivalent to clear text password storage
  * Fix authentication on all places.
  * Fix sysconfig variable name.
  * First step to use plain text password instead of hashed password.
  * Move repository into the SUSE github organization
  * decorate readme with more usage instructions
  * in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
  * Test clear expired commands in TestDB_UpdateSeenFlag
  * tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
  * avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.</changelog>
</package>
<package pkgid="7b975eafd792ee04db20cef30c9f22521852d0d12f71a3d02e3e90a42efe46dd" name="cryptctl" arch="x86_64">
  <version epoch="0" ver="2.4" rel="4.5.1"/>
  <changelog author="hguo@suse.com" date="1465387200">- First version, only to help with building ISOs.
  Implement fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1467374400">- A preview version with most of the desired functions implemented:
  * Key database
  * Key RPC server
  * Client encryption and decryption routines
  Bump version to 1.1
  fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1468238400">- Implement mandatory features:
  * List and edit key records
  * Unlock file system via key record file
  * Use custom options to mount unlocked file system
  Enhance usability:
  * Make encryption procedure's pre-check more thorough
  * Improve overall command prompts
- Bump version to 1.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470052800">- Implement mandatory features:
  * Encrypt empty directory skips backup steps.
  * Explain key revocation and TLS mechanisms in manual page.
- Bump version to 1.2.1 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1470225600">- Upon request, generate a self-signed TLS certificate for
  experimental purposes.
- Bump version to 1.2.2 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1471521600">- Implement mandatory enhancements:
  * Remove necessity for a backup directory to be involved for
    encryption routine.
  * Optimise certificate generation prompts.
  * Remove unused error messages and fix several of their typos.
  * Remove unnecessary safety checks.
  * Make the encryption routine work with btrfs and LVM.
- Bump version to 1.2.3 fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1472817600">- Implement mandatory enhancements:
  * Make workflow across all sub-commands consistent in invocation
    style.
  * Implement auto-unlocking of encrypted disks.
  * Show key record usage and details on demand.
- Bump version to 1.2.4 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1474027200">- Implement mandatory enhancements:
  * Do not allow encrypting a remote file system.
  * Implement command for erasing an encrypted file system.
- Bump version to 1.2.5 for fate#320367.</changelog>
  <changelog author="hguo@suse.com" date="1479297600">- Upgrade to 1.2.6 for accumulated bug fixes (bsc#1006219):
  * Prevent user from attempting to encrypt a disk with mounted
    partitions, or an existing encrypted+opened disk.
  * Ensure CA path input is an absolute path.
  * Fix two mistakes in handling of timeout input.
  * Fix minor formatting issue in manual page.
  * Suppress consecutive failure messages in the journal of
    ReportAlive and AutoOnlineUnlockFS routines.</changelog>
  <changelog author="hguo@suse.com" date="1493380800">- Upgrade to 1.99pre that introduces a library for decoding, encoding,
  and serialisation operations of KMIP v1.3 for fate#322979.</changelog>
  <changelog author="hguo@suse.com" date="1494504000">- Upgrade to upstream release 2.0 that brings a protocol evolution
  together with several new features:
  * Optionally utilise an external KMIP-v1.3 compatible service to
    store actual encryption key.
  * Optionally verify client identity before serving its key requests.
  * Password is hashed before transmitting over TLS-secured channel.
  * Fix an issue that previously allowed a malicious administrator
    to craft RPC request to overwrite files outside of key database.
  Implemented accordint to fate#322979 and fate#322293.</changelog>
  <changelog author="hguo@suse.com" date="1496318400">- Upgrade to upstream release 2.1 that brings important enhancements
  in effort of implementing fate#322979:
  * Improve KMIP compatibility with key prefix names and proper
    serialisation of authentication header.
  * Fail over KMIP connection using a server list.
  * Destroy key on KMIP after its tracking record is erased from DB.</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Upgrade to upstream release 2.2 that brings important enhancements
  in effort of implementing fate#322979:
  * System administrator may now optionally turn off TLS certificate
    verification on KMIP server. Note that, certificate verification
    is enforced by default.
  * Improve handling of boolean answers from interactive command line.
  * Improve error handling in KMIP client.</changelog>
  <changelog author="hguo@suse.com" date="1503921600">- Upgrade to upstream release 2.3 that brings a new feature to allow
  system administrators to issue mount/umount commands to client
  computers via key server. (bsc#1056082)</changelog>
  <changelog author="hguo@suse.com" date="1508760000">- Add previously missing systemd service cryptctl-client.service
  into RPM content, continue with bsc#1056082.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1623412800">- Update to version 2.4:
  * (bsc#1186226) - (CVE-2019-18906) client side password hashing is equivalent to clear text password storage
  * Fix authentication on all places.
  * Fix sysconfig variable name.
  * First step to use plain text password instead of hashed password.
  * Move repository into the SUSE github organization
  * decorate readme with more usage instructions
  * in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address
  * Test clear expired commands in TestDB_UpdateSeenFlag
  * tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case
  * avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server.</changelog>
</package>
<package pkgid="2861a9b00479b9bb0ec6978d9fee6696c3ae6c7c0fa405fe0466457caf12318a" name="csync2" arch="aarch64">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="f02a14dad61c6775a58f55a6b8ef47a2348566802de3367a2d4a9db6b9be4c28" name="csync2" arch="ppc64le">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="87c7b26dcbd3f24822549e565d3ee67137463027830482fc91ea147f118f69c5" name="csync2" arch="s390x">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="61c3d4764b6077493bdb6bb5b0e8213477cc38600f2ceeb240705d5811793882" name="csync2" arch="src">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="3.3.1"/>
  <changelog author="tserong@suse.com" date="1316520000">- Add csync2-rm-ssl-cert helper script (bnc#709811)</changelog>
  <changelog author="tserong@suse.com" date="1319630400">- Remove explicit lib dependencies from spec file</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- factory has librsync split into devel package</changelog>
  <changelog author="tserong@suse.com" date="1332158400">- Force debug output off completely when running under xinetd (fixes
  protocol breakage when target directories don't exist; bnc#752563)</changelog>
  <changelog author="tserong@suse.com" date="1338811200">- Drop requirement on libgnutls-extra-devel (unnecessary on openSUSE)</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="21ab47c06386a29a0e44b6eece73e5d17dd2d32dbd27f359e45aec22ed42249d" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1600444747.83b3644" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534248000">- Avoid systemd service removal errors when uninstalling (bsc#1093165)</changelog>
  <changelog author="kgronlund@suse.com" date="1534334400">- comparison of peer names provided via command line should not be case sensitive (bsc#1082576)
- fix for inetd stderr &gt;&amp; stdout
- fix log message when generating backup files, demote log level
- document -l and -N switches</changelog>
  <changelog author="kgronlund@suse.com" date="1558958400">- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1558958401">- Update to 2.0+git.1542296533.b974921:
  * Convert documentation to asciidoc
  * Add error handling for out-of-memory while parsing config file
  * create_key: use all random bits; add some error handling
- Update patches
  * Add 0001-Add-COPYING-as-docfile.patch
  * Add 0002-Patch-sonames.patch
  * Add 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * Remove add-COPYING.patch
  * Remove add-ac_prog_cpp.patch
  * Remove fix-sonames.patch</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- Update to 2.0+git.1600444747.83b3644:
  * VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
    (bsc#1147137)
  * VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
    (bsc#1147139
  * use standard %lld instead of non-standard %Ld format specifier
  * try to avoid (temporary) -rw------- root:root files on receiving side
  * fix diff mode truncation to first 512 byte
  * disable xinetd template by default as preparation for systemd socket unit
  * add systemd csync2.socket and csync2@.service templates
  * escape peername in SQL statements
- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.
- Remove patches contained by update:
  * 0003-Set-AC_PROG_CPP-in-configure.ac.patch
  * 0002-Patch-sonames.patch
  * 0001-Add-COPYING-as-docfile.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623240000">- (bsc#1187080) Upgrade and removal of csync2 package throws error
  for non-existent service template:
  Removeinstance templates from %service_* macros.</changelog>
</package>
<package pkgid="ba738422bd430f3c09af451a472d63c9eeccddca4166ba34451aab92eb43e65e" name="curl" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="48eb01183876062d1fa5e7231a7039a05d811ac9eeb16e1292b79d95d0087cab" name="curl" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e44f0e34e27b6a4719270f13f5530c5ba9407286305b196df96650d2e605d10f" name="curl" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="aa43ade4a5cc39af285354ca89c328ba4d1a053c5dbe08ca96d4f52141306068" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="843e1e8ff93f685250a1af87462584e6afbf66419cd11234faa858f63849dd88" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="5a689bdcdeba1e1e6b3c92da7f715aa4457cc6f6545bfacc1985460c3dbdebf8" name="curl-mini" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ab56994d1e97b136de66b780a9af4c45a4ec9a48ab18637e0477fb9d535aac7d" name="curl-mini" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7751003ed068c738777ccb85703899e8b226afc0986d73b38e1808ed14147257" name="curl-mini" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="4a5ca7b43d0806690e897aeb5c5773bec041b12a9603da8a772670803c0c6500" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f83abdf0c11d4a29894f21013f7eb9169a8ef3bc4f69161f3a7a325ce7a1fcc1" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="0dead4f7a6339aadc9831d6435bf49e8c9cc941fa0c6f39a9981d324bbcb4bce" name="dbus-1" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="2fb1583ada9796d27445ce2769e22fbeefbe5e870c5c5323e4907bb1a4deed95" name="dbus-1" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="55a7a8d350ef2ee085cccf513b515bedcccd2110a1143ce2577b4c5cf162d79a" name="dbus-1" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="9fdc2fd582a230d5c197567f00b43a62baa019f8c827935076fb94302b011505" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="db9f2630ce51946fb7451773e90f9536373c2012481c2aa5154349ace7f8804b" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="79ac4d47cfe45ebc04e859519939dff2335fad1ccd95a51c52ae37660094baa7" name="dbus-1-devel" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="e0791d7c9030e9e48d6be8f4ffc40656b54c0682005101309f9e1a5174992065" name="dbus-1-devel" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="e2ecdcb8e0457d402a0f82ca8c212cc53f51cb878b07e7e2402cb71f45af2f82" name="dbus-1-devel" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="92491d5ce4642a8506b3833b49ab7879977a092a77e7623d34ae81e2a598f9fe" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="a4bbf6c68cbb76918db4dc202e71c62ecfdc05e2c5bdb6c3c05a5bc9850feb00" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="e707fe490efecaa17c3957e9ccecf3af5b8a8efcb0cee1ed6c9fee6effc14fb5" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="debae1ae4e9349d0ee577f2ca436b09c4f43bdb4b9e085b989b7c37377bf6798" name="dbus-1-x11" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="cb6f47104fa6d13181267382344ce9a475cf1dafe28a2e72c13902b6de7c1d42" name="dbus-1-x11" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="dfbe7d575d38bd5b4b69e05cd2f33cb9c4d2081f81b7dd436e08f61cc48c4cf6" name="dbus-1-x11" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="d182c68de6df19ae1fb7a8527836033dd57a3d8a15581b79946355dfdca2783b" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="c11920a63e9d28ab81485b43f3985cde07a79a45fe0de8db87ac0b34578993fd" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1485345600">- Don't restart dbus on upgrade - Includes temporary work around
  for last version boo#1020301
- Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
  start or stop dbus.</changelog>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="970ef3bea8739f2eb2f24cfaad36a1ffadbd37df05d25c08ddd3f99bfc3cd0bd" name="ddclient" arch="noarch">
  <version epoch="0" ver="3.8.3" rel="3.7.1"/>
  <changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
  <changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
  <changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
  <changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
  <changelog author="josef.moellers@suse.com" date="1486123200">- Upgrade to ddclient-3.8.3.
  * added Alpine Linux init scritp - patch send by @Tal on github.
  * adding support for nsupdate - patch send by @droe on github
  * allow log username-password combinations - patch send by @dirdi on github
  * adding support for cloudflare - patch send by @roberthawdon on github
  * adding support for duckdns - patch send by @gkranis</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run in ddclient-tmpfiles.conf
  [ddclient-tmpfiles.conf, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619092800">- In the (sample) /etc/ddclient.conf, also replace /var/run with /run.
  [ddclient-replace-varrun-with-run.patch, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620820800">- Use %{_tmpfilesdir} instead of abusing %{_libexecdir}.
  Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="josef.moellers@suse.com" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
</package>
<package pkgid="999baf2d5f1034fd41f04d363397def4623830fa3c4d3a7091a0ca398a4cbf76" name="ddclient" arch="src">
  <version epoch="0" ver="3.8.3" rel="3.7.1"/>
  <changelog author="ro@suse.de" date="1319025600">- remove leftover debug line in init script</changelog>
  <changelog author="chris@computersalat.de" date="1326110400">- update to 3.8.1
  * Fixing #28: FreeDNS.afraid.org changed api slightly
  * Added dtdns-support
  * Added support for longer password
  * Added cisco-asa patch
  * Added support for LoopiaDNS
- rebase patches</changelog>
  <changelog author="binli@opensuse.org" date="1348574400">- Update ddclient-3.8.1-config.patch to check the configuraton file
  from /etc instead of /etc/ddclient (bnc#781699).</changelog>
  <changelog author="chris@computersalat.de" date="1351080000">- rework config patch
  * ddclient.conf: add example for selfhost (http://selfhost.de)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1368619200">- fix init script: start ddclient with "/usr/bin/perl ddclient",
  otherwise startproc will falsely report that starting failed.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1368705600">- more init-script fixes:
  - startproc now needs the pidfile parameter (or it woulld look
    for "perl.pid". Sorry, should have run more tests.
  - while I'm at it, get the pidfile from the config file in case
    the user would have changed it</changelog>
  <changelog author="p.drouand@gmail.com" date="1382875200">- Improve systemd support for openSUSE &gt;= 12.3</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1386158400">- fix the breakage from last submission:
  * service file was put into tmpfiles.d
  * tmpfiles config was put into systemd service dir
  * rcddclient link was broken (pointed to "service" file)
- fix rpmlint warnings, also introduced by last submission:
  * service files and tmpdir config are neither config files nor
    should be executable
- package is noarch, mark it as such
- documentation should not have executable bit set</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1388491200">- update to 3.8.2
  * adding support by ChangeIP
  * sha-1 patch  to allow Digest::SHA
  * allow reuse of use
  * preventing deep sleep - see bug #46
  * Fallback to iproute if ifconfig doesn't work
- drop ddclient-3.8.1-update_nic.patch: upstream changed the "use"
  logic
- move all sample-* to examples under the documentation directory
- update source url on sourceforge</changelog>
  <changelog author="jsegitz@novell.com" date="1400587200">- ensure proper handling of .service files with %service_add_pre</changelog>
  <changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
  <changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
  <changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
  <changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
  <changelog author="josef.moellers@suse.com" date="1486123200">- Upgrade to ddclient-3.8.3.
  * added Alpine Linux init scritp - patch send by @Tal on github.
  * adding support for nsupdate - patch send by @droe on github
  * allow log username-password combinations - patch send by @dirdi on github
  * adding support for cloudflare - patch send by @roberthawdon on github
  * adding support for duckdns - patch send by @gkranis</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run in ddclient-tmpfiles.conf
  [ddclient-tmpfiles.conf, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619092800">- In the (sample) /etc/ddclient.conf, also replace /var/run with /run.
  [ddclient-replace-varrun-with-run.patch, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620820800">- Use %{_tmpfilesdir} instead of abusing %{_libexecdir}.
  Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="josef.moellers@suse.com" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
</package>
<package pkgid="7567b41545cb7ac4c3c732cf7653c0b598de6a01f25834b8b3a6f5ec032fa9bc" name="deja-dup" arch="aarch64">
  <version epoch="0" ver="40.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="643a27878a4f6eef7a320ef1b5b0a8eb28b999bb7d96a840b5d53f6df4b26224" name="deja-dup" arch="ppc64le">
  <version epoch="0" ver="40.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="6f571202600931665d1804f3c245476deed57f5284f2d7a519db6b214d91cbb2" name="deja-dup" arch="s390x">
  <version epoch="0" ver="40.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="f8c8c2d73d17663438a4870a3c0c14ebcb9c495c7395a0773c3692e9d9d6a780" name="deja-dup" arch="src">
  <version epoch="0" ver="40.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="981014745866a213d6a610b59f03d8a3f960e0de5df65c0b1827cef5f0205eac" name="deja-dup" arch="x86_64">
  <version epoch="0" ver="40.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="a407f26934cbcd16f4c1fc8288486dbf77c9b32b5465ca502ee12cfb5e5792b3" name="deja-dup-lang" arch="noarch">
  <version epoch="0" ver="40.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498737600">- Fix obvious typo } instead of )</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 35.6:
  + Fix a potential memory leak in the monitor daemon and few other
    bugs.
- Changes from version 35.5:
  + Improve on-the-fly dependency installation and fixes a few
    other interaction bugs.
- Changes from version 35.4:
  + Add support for GNOME Online Accounts and cleans up the
    interface a bit.
- Changes from version 35.3:
  + Fix some bugs around unicode filenames and network access.
- Changes from version 35.2:
  + Fix a crash we cause in nautilus with our extension.
- Changes from version 35.1:
  + Fix a header-color bug introduced in the previous release and
    also try to fix a long-standing bug around backup/restore
    buttons being disabled too often.
- Changes from version 35.0:
  + Modernize the code base in a few ways that make the experience
    better in GNOME 3.
- Add meson BuildRequires and switch cmake macros cmake, make and
  cmake_install to meson, meson_build and meson_install following
  upstream switch to Meson build system.
- Drop intltool BuildRequires: No longer needed.
- Add libgpg-error-devel, pkgconfig(appstream-builder) and
  pkgconfig(goa-1.0) BuildRequires: New dependencies.
- Drop deja-dup-vala-0.36.patch: Fixed upstream.
- Drop deja-dup-help2man_stderr.patch: No longer needed after the
  port to meson.
- Drop handling of localized man pages in install section, no
  longer needed.
- Drop suse_update_desktop files macros, no longer needed.
- Drop obsolete post(un) handling of following macros:
  glib2_gsettings_schema_post(un), desktop_database_post(un) and
  icon_theme_cache_post(un).</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Update to version 36.0:
  + data: Don't depend on bash.
  + BackendRemote:
  - Guard against returning a null GFile if we can't find mount.
  - Handle the user specifying a non-utf8 folder.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add deja-dup-fix-setting-drive-volume.patch: BackendDrive: Fix
  setting a drive volume (lp#1717230).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1506772800">- Update to version 36.1:
  + Fix backing up to external drives.
  + Updated translations.
- Drop deja-dup-fix-setting-drive-volume.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1508500800">- Update to version 36.2:
  + Fix crash when trying to restore missing files.
  + Fix the UI from freezing for a second when mounting the
    backend location.
  + Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1509883200">- Update to version 36.3:
  + Fix the restore dialog sometimes being blank.
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1516190400">- Update to version 37.1:
  + Add new Google Drive backend and make it the new default
    backend.
  + Updated translations.
- Update Url to https://wiki.gnome.org/Apps/DejaDup: current Deja
  Dup's GNOME web page.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Drop %glib2_gsettings_schema_requires macro: it's no longer
  needed since RPM File Triggers.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523620800">- Update to version 38.0:
  + Drop ulimit for monitor process, it was causing crashes.
  + Fix autoscrolling in progress window.
  + Exclude snap cache directories by default.
  + Updated translations.
- Add gio-2.0, gio-unix-2.0 and goa-backend-1.0 pkgconfig modules
  and glib2-tools package BuildRequires to avoid implicit
  dependencies.
- Replace pkgconfig(appstream-builder), dbus-1-x11, update-desktop\
  - files and perl-gettext BuildRequires with appstream-glib, dbus-\
  1, desktop-file-utils and gettext-runtime respectively, what
  meson really looks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 38.2:
  + Fix not being able to find the backup files when restoring on
    a fresh install.
- Changes from version 38.1:
  + Use a primary menu instead of an AppMenu, per current GNOME
    recommendations.
  + Drop support for the legacy desktop status icon.
  + Updated translations.
- Drop meson version fix via sed in spec, no longer needed.
- Stop exporting optflags and rpath before configure, no longer
  needed.
- Renable meson test, tests are now ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547726400">- Update to version 38.3:
  + Allow restoring from paths with symlinks in more situations
    (including a fix for a backup error when ~/.cache is a
    symlink).
  + Treat operation dialogs more like real dialogs (modal to
    preference window, with correct styling on default buttons).
  + Try harder to stop running duplicity commands when we are
    terminated.
  + Don't hide an error message when also running our bimonthly
    backup verification.
  + If there isn't enough space in the backup location, tell the
    user how much is needed.
  + Exclude flatpak cache directories by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549800000">- Add deja-dup-fix-build-vala043.patch: Fix build with new vala
  0.43.x.
- Disable meson_test, currently fails.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551182400">- Update to version 38.4:
  + Update app icon.
  + Don't run monitor when automatic backups are disabled.
  + Drop libpeas dependency.
  + Fix compilation with valac 0.43.
  + Be more forgiving if packagekit is unresponsive.
  + Updated translations.
- Drop deja-dup-fix-build-vala043.patch: Fixed upstream.
- Drop pkgconfig(libpeas-1.0) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562328000">- Update to version 40.1:
  + Fix versioning to be correct.
- Changes from version 40.0:
  + Fix tests when run under glib 2.60
  + Updated translations.
- Changes from version 39.1:
  + Fix a bug that could have caused backups to be encrypted with
    two different passwords in some cases. This would result in
    difficulty backing up or restoring by not accepting the
    password you expected it to.
  + Fix a bug that caused duplicate save or exclude folders to
    appear in the preferences.
  + Delete a canary file that duplicity's pydrive puts in your
    Drive.
  + If you don't ask for your password to be saved, we now clear
    out any older saved password.
  + Finally delete the ancient Ubuntu One backend code.
- Changes from version 39.0:
  + Switch away from GNOME Online Accounts to our own cloud keys:
  - It was brought to our attention that we shouldn't be using
    GNOME's keys, as they are intended for GNOME only.
  - Google accounts will have to be re-authenticated with our
    keys.
  - Nextcloud accounts will now appear as webdav network server
    accounts.
  - Adds new pydrive_pkgs option to list the package names needed
    for the pydrive duplicity backend (for now, the system
    package that provides the pydrive python2 package should
    suffice).
  - Adds new google_client_id option if you want to override our
    default account key and use your own. You likely won't want
    to do this.
  - Adds new dependencies on libjson-glib and libsoup.
  - Drops libgoa-backend dependency. The libgoa dependency will
    stay during a transition period from the old keys to the new
    keys.
  + Unmount a remote backup location when we are done with it, if
    we originally mounted it.
- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
  BuildRequires: New dependencies.
- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
  nor used.
- Reenable meson_tests, upstream fixed the issues.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Add deja-dup-duplicity-Mark-GPGError-extern.patch: Mark GPGError
  as extern and prevent GPG symbols to be public API. Also fixes
  building with new vala.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176000">- Update to 40.6:
  + Fixes a bug that prevented backing up to Google Drive accounts
    with unlimited quotas
  + Fix a bug that prevented backing up to Google Drive in some
    rare situations
  + Fix a bug that prevented the first login to Google Drive
  + Fix a bug that prevented resuming a full backup
  + Fix 2038 date problems by using 64-bit dates internally
  + Fix building against valac 0.45.2 and later
  + Add optional dependency on libgdk-x11-3.0 (only used in flatpak
    builds)
  + Make libgoa-1.0 an optional dependency (still recommended for a
    few years though)
  + Support autostarting via the new Background portal
  + Updated translations.</changelog>
  <changelog author="info@paolostivanin.com" date="1579176001">- Add meson version to spec file
- Drop deja-dup-duplicity-Mark-GPGError-extern.patch: Fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1623758400">- Up duplicity dependency to Requires: deja-dup cannot run without
  it (boo#1187256).</changelog>
</package>
<package pkgid="132dd21c7611df3b786ab637eb5d3740f4f3976385ff29304685126d51ed3d94" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="cbb2f6a909a8ad73b416145910978ad25e1fe59cf22f1ed2c0fccf3c016cbc6a" name="device-mapper" arch="ppc64le">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="f930559faa4a304f73022cf3afc7b45a9c11f01e7ce323dd4907d673b3b71086" name="device-mapper" arch="s390x">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="bdbb39af0e79ee51c0ca058c279e937dd8903366b2cefe4b64732e21cc1d10ab" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="77c5ecde3ac02a54285c5711887ea1ae3eaac9e995c6c10803a143f391ddc012" name="device-mapper-devel" arch="aarch64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="57490318225eb5c17c40fcbed8241c6857a3bb8a8b36d006eb3536f8e72d77df" name="device-mapper-devel" arch="ppc64le">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="e87d17d8dfb7ebf28d365acc775e8f8a0ef01c0802e2097e63e975406e370e24" name="device-mapper-devel" arch="s390x">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="ed15924e65bac71855be0a79ecc648a728440201d7cc990b6e216f40abfc84ac" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="2038349f467b8a91ef3d488f96c7bfc60036d3bafb53d3d6f55df16c8644aceb" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="6467bd668e113d79986313bacf183cd0b705d9b67aa77c0b751d6cb1ac040a6d" name="dhcp" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="05b1dfe7abbe9192ab96aaf54383ae5e523ac9ab236773310965e1c6d656f8e1" name="dhcp" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="6e0c3c674959c8a3a9813ba13083ae253190f52387598d8caa5fe7b63ea0cf06" name="dhcp" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="db2b695ee476f89a054d423c280529f80ef5ceb2689638333e8c231f9d137a7a" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="49d66ca18e67a98f0be6745806d50a13509e54adb5e5cd8adb4fab2910945b6d" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="af14deea1ea15f209a58f9c2f1671e5fcca704958503317d22897a25945f604a" name="dhcp-client" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="f0bb2789f162412b2a64ec308adc498adf664cdd53e48e82bbfb43902234d4d9" name="dhcp-client" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="8ed33487ff4f7ec5ccfd63bdd658e81eac730381b0fcc4c8b102a6faed159459" name="dhcp-client" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="6817af8bbda2c44e6a33cdb46e5277d7d783d339d79620d834dc7c8f12d3885f" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="808dff9a6968e20234f19ef86a7c06d90b790da942af355dad7b225b6c5c4398" name="dhcp-devel" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="a61b0c62f67d56cf6ffe86a450c136604467077932bab0e24bf5bdd762ef0c7d" name="dhcp-devel" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="09d974fc4ee5afa15d5cfcb1ba59e8df008e71a929df5f974e3a0665bd66bb50" name="dhcp-devel" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="4b7ca4a2030399cc07919749baf9e82e9f5c5f522609ed436e517ddd9cae9f5c" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="3d9bb03c5169ca7134a8838e6a3996c84a9664f36adc3a303e55f3de0e572de8" name="dhcp-doc" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="7d5d8b9de9ae2dc524ac8c92e7c87181e8e199ef24cc7fcc88ad6fb97afc8684" name="dhcp-doc" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="4833f4c1324c15c2924add1aa10b813a55fd0fefea7f8363f1899a8a1176cbcf" name="dhcp-doc" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="3e86df96e61767fd62ccc8604c47409cb3d7d46be0cb795398ec072ef596f7a2" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="ddecdfe3a04ed038941a02983de915e8eed839e6f6e7d9a391250ed8ec48b9e4" name="dhcp-relay" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="063c026d67194e731718bdb1a10dad7426e5831e71e9e30bf582473f9e54a4e7" name="dhcp-relay" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="d39ade0565389fd5e28517c91403c3e5e9c6b6d5ea9e2d781c188abb7e17a4ee" name="dhcp-relay" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="5526260ef1f5ba352fa3403cc99a467a1cbeddb8c009ffee2a73a8d574c2c540" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="f483447dbb41edcbe5ba0a7b684ddf39f56079147d7f0d88701ee5aacf620fae" name="dhcp-server" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="0ef23b4cb08147743749c889f6a8b38f8a4c081749c8025a3323762221c94216" name="dhcp-server" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="dffdee5af24bbba4d790bb785e746fb87ff0b418cf6424552dff39fec14c3f26" name="dhcp-server" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="a8b8d5efa523188bcefc3efea964e8bb4aac64dc6cfeedaa39499a37724996ce" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="e882616e9c71030734d5298b0436cb9b95e738b0c6532441b50a35079180cf0b" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="2863f1f8f70afaaa2d2dc2bb32c4448b10bf633a02e7b55d2db8219d8e3cde07" name="djvulibre" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="6b7fc49e0894237faf0a131d5aa94e74c8a1de72dd879a16959ee871ad6a68a5" name="djvulibre" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="a1f962c079761fe744e05a4bbf38cabbfb9aa14c048deca83b4b3e2d9084325a" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="lmichnovic@suse.cz" date="1219665600">- update to version 3.5.21
  * Speed improvement on multicore platforms
  * Ddjvu now can produce pdf output.
- renamed lib to libdjvulibre21 according to Shared Library
  Packaging Policy</changelog>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dc0e673d7575e1d682fce9b2ed3790fe83f839bb9e8c39345a1d3a1417aab596" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="d860ba612ea1548371a696f16ba229f4c35ca457507a1649d38d68b678aad46a" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="c23eea4c774857fd5f43c6a2a73c63867d080e290db549a0dcb5df3ffe5086d5" name="djvulibre" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="c95157aa1468304d122b8f0b1739e2a7a79abd1be9a6c7368459b65cb770869a" name="djvulibre" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="7e204f7443837554ad8c8e6f89c6614edfe53e9a4e6321d231a01c3bb0317cb6" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="mseben@suse.cz" date="1244462400">- updated to version 3.5.22
  * backported djview4 version of nsdejavu.so
  * various bug fixes
- splitted to doc package</changelog>
  <changelog author="pgajdos@suse.cz" date="1289908800">- updated to version 3.5.23:
  * Added ddjvu_document_create_by_filename_utf8
  * Generate icons with rsvg rather than imagemagick.
  * djvused: correctly outputs escape characters.
  * djvumake: added options to generate foreground colors.
  * Various bug fixes.</changelog>
  <changelog author="pgajdos@suse.cz" date="1299499200">- updated to version 3.5.24:
  * Set ddjvuapi_version to 20.
  * Added ddjvuapi support for changing the white point.
  * Added option "-u" in djvused.
  * Added option "-o djvufile" in djvuxmlparser.
  * Added support for &lt;CHARACTER&gt; tag in djvuxmlparser.
  * Added print-xmp, set-xmp, remove-smp in djvused.</changelog>
  <changelog author="idoenmez@novell.com" date="1304337600">- Add djvulibre-3.5.23-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="pgajdos@novell.com" date="1307620800">- Fix MMX code when using gcc-4.6 [bnc#696824]
  * adjusted gcc46.patch</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="pgajdos@suse.com" date="1331640000">- fix build for factory (define $QTDIR)</changelog>
  <changelog author="dimstar@opensuse.org" date="1331812800">- Add djvulibre-gcc47.patch: Fix build with gcc 4.7.</changelog>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="3b17a510ccd548e072f4c109aaa1a4d9f0ef4bc3a7cddccde5a014d0cc6ee876" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="4e4f615600a9756de5c32aa2b78cdd794a939611e850c0ed70f28b877cab32ec" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="8b3753720563f609cf595474ff3785b3072602a022ab4da3ad7f438afabfdc85" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="13c08f554fe481bbba941327368463d95da153f5af693d51ea0ca961507f09ff" name="dlm-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="47f4b23dddb4247f89427fb4bbf17a92f3176b2c3d4ed35284d35edd7ccfed98" name="dlm-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5cb856003b2890e9d8a4819f9e51d074de2cac06479dc485f800a29a2ab2d3b9" name="dlm-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c6210c25aa818c5e5a7c822b7ea362c7dadf1b8f64500148b74bad2b32e5df88" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="61a6ad760fb1d3c0dffaa8e9cecb05ad5fd0b528ea4f2df507c821e15811ad64" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="71e8e32175af03b572b3becb4d118b8e9da35c41cff585692d436644b6f19807" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="eda8d10352e519bc8c86d374d4cb4d26cd2fccc45d803c3d5dd3ece4fc642e7b" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="ccb9ead19f616bf2cece2442915a83afa87e3165218683b5f2a2b9df9487036e" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="9a1e3bd4ed6f7c57b57aab66311ec2f06b07e767486b9c2984aaac499d354fca" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="91e977e33f6e54e5fc615f8296d77b59e802e1481099c22c51e52cf9c44e0ff2" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="afb79d4bff3f2cf3a78f0ff9fba59aaaf9fccbdaded7e2b3d97aac695921f4fa" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="7932cf6ceabecd5c475067291b76adcef5d606e03916e9494dca47524d9c77a1" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="00e709921833870d9e74c61a8eb6a4266a4ff2a7384db0e719d4058f591e5623" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="426b728b1215d61c1cb5a5094ae356a60c2893719d81ccf05eb14f4d01c61fe5" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="457596b44fbdd6387c6799b38f5e95761a94a10971572dc981d247c5167a56b7" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0f45fb445498f331042261739a69c096713f411ea34a3f67f9404f1dc92ac64f" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="54399e9be00561292b5c05f490a70be4a229013735eab40de555b827ced0392d" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="e743a6a5fa5d1d68f590ba5325939b20960fa9c3c323e60fc5677e9dcb39cefe" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="19e36348ce06c3b4fe51b3159d3bfdc57195893f379bb5ae1d845e811d8683cb" name="dlm-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="340d90b18eecd0a246594087158af47a3f5f625d9020a560ac045b7263ad63d0" name="dlm-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="f7831bb543149282a0b501e4e64e4537ce1d655fc653c6a3bddb02a281ca4b35" name="dlm-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="b5ea1389c1ff98cab4d98d8a2120aa2fc4ff107cf6304da02e2c8a5d29c92949" name="dlm-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5a35b83bf849ca888e6d6fb0f6ff3deffbbdf03cdb58f2dcee82641b020061b2" name="dlm-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c220333cd38b01fff6df42b42c7710688a042d23a89b5f7ef7381c21c42fa586" name="dlm-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="e96d648332988d3887a957cd127e9265bb8230a911bfd15856e955610038a08e" name="docker" arch="aarch64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="3c9db42c97a19ebd7814ff5a56eb6daf0cd34b295f8d2c54fdafb485784c7b95" name="docker" arch="ppc64le">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="6a81330b3075e6499952c5ee34fa1c012785a7e31bd9cc966d06396ca316ffc7" name="docker" arch="s390x">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="056e4cbf6219af718291ac8f5298eba90fbc8b7d7a285a4957a42aaf6a86493a" name="docker" arch="src">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="5381a7c9853b06c2f546ebb3edb96711cd9a98012b81d20e48f8035ef37c55f0" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="ec9a91a217bc263b99137544c79963795cb0123fe52c1574d5b8f933c4990ee1" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="86af3cf3af7a6f54563000f5e72cfbf2a63b44d24f2404b80de8f41a2646c824" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="351a536abd6f48aa6e67af408f6c740e3988ebb4f7d9348d07dd7a6e506bdf77" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="dimstar@opensuse.org" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="1ed74719437fdf53b8ddbaeae038fb7d39d187652227f1bde1bf4121ffc62733" name="dosfstools" arch="aarch64">
  <version epoch="0" ver="4.1" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="mcepl@suse.com" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="2e32873126afb438a33553555078fc4363d0bad5fcf5468f439d0c3e6417d2e1" name="dosfstools" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="mcepl@suse.com" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="ef1f5e1bf4f129054d72d30267e4ca0c0117d76730f12623c1d4f51ba3428430" name="dosfstools" arch="s390x">
  <version epoch="0" ver="4.1" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="mcepl@suse.com" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="f07c40edefebccea7d0d31f8dbd13a4b18bc7a27315f2fc8e20e39d3c100447a" name="dosfstools" arch="src">
  <version epoch="0" ver="4.1" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1362398400">- update to 3.0.16: label fixes
  * dropped upstreamed
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch</changelog>
  <changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="pgajdos@suse.com" date="1370260800">- update to 3.0.17:
  * Fixing segfault in dosfslabel.
  * Allow operation on SH4 CPUs.
  * Finish cleanup of byteswap code.
  * Fix offsetof definition.
  * etc., see ChangeLog
- refreshed ppc-reserved-sectors-fix.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1370952000">- update to 3.0.18:
  * Adding initial i18n support for manpages with po4a.
  * Renaming tools to sane namespace and keeping legacy symlinks in place.
    | dosfslabel becomes fatlabel,
    | dosfsck becomes fsck.fat,
    | and mkdosfs becomes mkfs.fat.
  * Correcting spelling typo in boot.c.
  * dosfslabel: Do not read beyond string length (Closes: #709587).
- refreshed both dosfstools-suse-dirs.patch and
  ppc-reserved-sectors-fix.patch
- added dosfstools-system_id-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1371038400">- update to 3.0.19:
  * This release fixes  a  segfault with fortify.
- removed dosfstools-system_id-overflow.patch</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 3.0.20
  * This release updates default sectors per cluster for FAT32.
- Remove ppc-reserved-sectors-fix.patch (implemented upstream)
  (use -a switch to disable aligning structures)
- Signature verification; more robust make install call</changelog>
  <changelog author="pgajdos@suse.com" date="1374062400">- updated to 3.0.21
  * Minor miscellaneous cleanups.</changelog>
  <changelog author="pgajdos@suse.com" date="1375099200">- updated to 3.0.22:
  * Improved boot compatiblity.</changelog>
  <changelog author="pgajdos@suse.com" date="1381924800">- updated to 3.0.23:
  * Corrects clustersize to fix issues with EFI System Partitions.</changelog>
  <changelog author="pgajdos@suse.com" date="1385380800">- updated to 3.0.24:
  * Fixed dosfsck on big endian platforms.</changelog>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="mcepl@suse.com" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="e238be44a9ff73bdced2e3f0033258c6adc52f3e5a2b48e6226a02631db53850" name="dosfstools" arch="x86_64">
  <version epoch="0" ver="4.1" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1394107200">- updated to 3.0.25:
  * Prevent corruption of FAT during fsck on 64 bit platforms.
    unsigned long is 64 bit on x86-64, which means set_fat was writing two
    entries, which corrupts the next entry. This can cause loss of data in
    another file.
  * Fixed remaining 64 bit build warnings.</changelog>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="mcepl@suse.com" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
</package>
<package pkgid="697da7c2076f198ea750f27a8b6d065604a5c361b220b44cd4a79873e9729680" name="dovecot23" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="94ff12812ae1ee24a7e84b9edfe9ca2578b175aa9cf227bc3f949a0da69ef645" name="dovecot23" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="08cee15a7828315047cdd7c8bf725378913441f261d08ba6d9dd63e02bf80b30" name="dovecot23" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="5ce87da6e1974698cf77724da72c3037b43e5f104c55787c9ef29293994bf0eb" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="2e3202128046f00465d27d380515b258e39030bcf2cbb5d73c307f612e0fb7ad" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="a5aa54e5a8e4883447b7795490e928a1ddc79f1f4f7419ec155da291a8668fcc" name="dovecot23" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="f06a30b72fe737634b73fb40ea2b0f14f1f81901afdc518fa4943dd57df5613d" name="dovecot23" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="db27bddfd085edf15d24542c7a935e348befe9c41566451b10c3331a09ea6895" name="dovecot23" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="b56beaf4ece194c1ea1bfa106201d5012234f4244ef4efd660e20d63cab98cf2" name="dovecot23" arch="src">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="b7d153cd9784a2449d4e7b05c523f62a1e51a967ef418b9214cab608178f26f8" name="dovecot23" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="0a6167f760e5b47b28c8f16be12b09469ac1bddaadbfad4a3dab255ee659b3f3" name="dovecot23-backend-mysql" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="99b5d2b1d495e1aaa122c0b6ac0976add68e0d94f2118d0313241873b4665cd3" name="dovecot23-backend-mysql" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="dc8862434bce19e7de9cdbdf8e5993f8560d6835033195b85c959f1859a0a179" name="dovecot23-backend-mysql" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="d09fd86d495d2e5e9b6139931c25ab6ae2b5d056f74d3d3faa8f7ffc766cc1ca" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="1aa3cba9e9287991bc3878dc5605f43d8ab4ab768e8f291b7a0a1f42db651753" name="dovecot23-backend-mysql" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="4afcc2788a0dae803983858d1b5e30775985f5a2757f8b9446ecbbdfbc4c8a41" name="dovecot23-backend-mysql" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="76f2069ea893d0cc4ef5e8c94c798ab6c11eacaa50e1fb77efa39216282fc71c" name="dovecot23-backend-mysql" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="b4f6ebf238b6387bd1b7ca42dea336c3d39fff43d393ac2b435894c8506d52c8" name="dovecot23-backend-mysql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="cd7b5839483f0076cad2d542283b97b3544e4acf43e8978bed14014be42e2e4a" name="dovecot23-backend-pgsql" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="cfd07d789e82e9196dd99f0b5323339fef1c23592552a9390c2bec0338ea37f0" name="dovecot23-backend-pgsql" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="5edbd48a1fc0389fbf3f1a152f4d7eee6d87a4fcfb1a4d94469e556bf68a3b20" name="dovecot23-backend-pgsql" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="2688c009540f45c559d5d3e40906d64268aeecce0dcb7b62d7765a4c96983d25" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="566e557933ad266fab043d5c361181109487a6344a4bc8117867682807a16e52" name="dovecot23-backend-pgsql" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="89d8b9fd25a227e4709f65168895e6873720f15e3b5b614e5609682e89bc6bca" name="dovecot23-backend-pgsql" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="6eac15a15aeed8e782a8ef79e70c49d4a28d739e47e7ab7471d0e5d60e6e195e" name="dovecot23-backend-pgsql" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="122d646b347f7ef32f745d58c424ec5a48fe8d4261cbc2a6225ee483a794843b" name="dovecot23-backend-pgsql" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="608b4a118f977d9ae809f520f8c9179f1e1528e1bde478cb5a0f68dba5768c39" name="dovecot23-backend-sqlite" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="c04219e6a89a42a45b417d18a18676b77c64f285ce3cf6703fe42887917eed98" name="dovecot23-backend-sqlite" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="95c35a430388098c7f73dbee219cbc50abe67c32b0c3d7c0a4ff4fb960270249" name="dovecot23-backend-sqlite" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="aadd3a570c59d6e721ae53f93f4b68b80012a59dfeeb732ba5ba72f0196556fb" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="dc38eaf0410239e325d51b230e70bf53b4fff059e61b7ed0782a2a8a92f71f65" name="dovecot23-backend-sqlite" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="b09a1e2c2cf57fbcd8d00304fc19c3bbb11e6eea608ca4d7138faa21fe87b05a" name="dovecot23-backend-sqlite" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="d34fc939cf8121e223daf0c7d0feef71e24300fe0f582abf57801ace7f630550" name="dovecot23-backend-sqlite" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="ddddcf50f73f42651a5ff978a21edc828c555442e38d65ff95889c56121a4bad" name="dovecot23-backend-sqlite" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="0df7d80343ffbc73bb28cb6f7f1424c7ecbd07649fdb313745c5b06dd0a81228" name="dovecot23-devel" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="e60a5a2a1fb22d5c088fe9acd32395f27eb53083719707e6de0dd53bf98c2116" name="dovecot23-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="65514464fdd32e818f7a832987e6592fb6dd91bece6d8223b80cbca2c5bbca63" name="dovecot23-devel" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="24bc1acd8b433b59192b5986290ccf232b13ec666f7e9d097e296479361b7208" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="b34f746124b364cb29886e77148a45379048bd24ee9be865f89568b124b94a25" name="dovecot23-devel" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="46f42807364755ff805186ef6bab1d5381c7a53d89fb8d0dd194758afa57a34b" name="dovecot23-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="e8d10483eca937322ca3c4ed438e4cf5252c76567cb1cbd20e115243f0a6f288" name="dovecot23-devel" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="38a387423313dfdc14fc4f627c04991643b8b52725b3fa589b5e72ccc2068a81" name="dovecot23-devel" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="bfff6afd18acf1f649b834859a6af685cd888c20b99da407825f51b66bec6c4a" name="dovecot23-fts" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="edc499a0f9146d1e21614c2341fa98ddc0d0b0f4746aa2fe2bb8b82c1b099d10" name="dovecot23-fts" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="c58c4944d6427d2835714a8d299f3b79f8baa82a319c4850c64ecda13760e9b4" name="dovecot23-fts" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="da8b41fa11500b4c06a36a935662f6ad3c9b53bc908adc6194ebf3f04c60e2ec" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="2879b03dfd1ce18a9108b1e3a8bd71099f0370ed9e2ef3b661a8cdd8147a3528" name="dovecot23-fts" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="651e06bb14f6c6090ef8a7e85d898663ce9b59fad68b56083205456c705fa31e" name="dovecot23-fts" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="ff6b1cb0cfce74265dd62bc51b3325d8abfc15b6143e4b40dd0d2f5472969431" name="dovecot23-fts" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="7b5c270a4f5b8518d1ac46f7cacb8db74b623354997c80afed6964a24ca3b5a6" name="dovecot23-fts" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="c53e8613b6e5d7cf8d41d0ed1b22d82a6f1064b4263e55f3ea397a5b44fb3123" name="dovecot23-fts-lucene" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="7d07eb65161b0894088e2f7117174c9494f9759b28057ce6f69f0245270de1ce" name="dovecot23-fts-lucene" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="bccc10b9cb2ae02cc152955980b4c2346b06b01e7eca22a72123b3a1745e8238" name="dovecot23-fts-lucene" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="7b789d4a83be33ad4268ca9778bdd83845b4788a400dee3ccb1f7bd8d200f002" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="ae8ef447cf9e5a646211923126beec6f925fd62e4bdd5ffe66e1425c28895c60" name="dovecot23-fts-lucene" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="393f2736379761c3d4d547c4ec0e486c7951b129d65b1e65381262cfb6edddb3" name="dovecot23-fts-lucene" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="8798dfdd80beb04f395baa652a8e24cf2fef87c2285aa644674f4332cc1dad19" name="dovecot23-fts-lucene" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="3909d1b380583b99efdda005a0b08fa3bded9f6b323446ded525ecf0d985cce6" name="dovecot23-fts-lucene" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="492b1957da94be85535713da9cfebea184281d564723cb4df7f7c9c3f42507e7" name="dovecot23-fts-solr" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="58cfcadc658df9407cc5f43c9f500cacadd163c29ad60f9d320afa90a4a9545f" name="dovecot23-fts-solr" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="c4a2bf4ebc333f2b2e4fbffb63c2de85368e3cbc71a7b36259530314a9ec770e" name="dovecot23-fts-solr" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="0136fc1ba98d020212cd6a69cea3466322a6a8e983ccd4e5f33df98aed017569" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="0205c18cc15be37556a36444708921de36f0cbb6aee092dcdcbb33ef02eec37a" name="dovecot23-fts-solr" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="e9dfb2af301dde03e6bd1d58e6e4280d7c70cadee806b6377102ddf49486e35f" name="dovecot23-fts-solr" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="7aae21279a75629925f376895b35dac7d099c737a56602e588807c7b2840baa5" name="dovecot23-fts-solr" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="ead740fdeb2fa84b53f1e723b7e83f6e852f1af000ca07063bbed9b437e37527" name="dovecot23-fts-solr" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="d6bbfc56d45c56a46a133c1a69aa911713de318e665c1bb150813c929593a5e1" name="dovecot23-fts-squat" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="147cd32c851a15405ea0cd1ac148ea84faec3b3a01535ee75679886b8e03c29c" name="dovecot23-fts-squat" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="e261793bcbbf0a8d1372f0f0996cc9afe1f88804916243f9142e79eccfbff66f" name="dovecot23-fts-squat" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="a8a5b64c992b91f4fb104f31eb3fd157bc1dc8b3dc8aba56c59c73f90746d53d" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="52.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update to 2.3.0.1
  * CVE-2017-15130: TLS SNI config lookups may lead to excessive
    memory usage, causing imap-login/pop3-login VSZ limit to be
    reached and the process restarted. This happens only if Dovecot
    config has local_name { } or local { } configuration blocks and
    attacker uses randomly generated SNI servernames. (boo#1082828)
  * CVE-2017-14461: Parsing invalid email addresses may cause a
    crash or leak memory contents to attacker. For example, these
    memory contents might contain parts of an email from another
    user if the same imap process is reused for multiple users.
    First discovered by Aleksandar Nikolic of Cisco Talos.
    Independently also discovered by "flxflndy" via HackerOne.
    (boo#1082826)
  * CVE-2017-15132: Aborted SASL authentication leaks memory in
    login process. (boo#1075608)
  * Linux: Core dumping is no longer enabled by default via
    PR_SET_DUMPABLE, because this may allow attackers to bypass
    chroot/group restrictions. Found by cPanel Security Team.
    Nowadays core dumps can be safely enabled by using "sysctl -w
    fs.suid_dumpable=2". If the old behaviour is wanted, it can
    still be enabled by setting:
    import_environment=$import_environment PR_SET_DUMPABLE=1
  - imap-login with SSL/TLS connections may end up in infinite loop</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337602">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
</package>
<package pkgid="6424ade650020e0425cbe47a286919f1efa13c27a8803cc64c0e92df0722550e" name="dovecot23-fts-squat" arch="aarch64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="c6c63a06ad2411db9b6705cd898f34ccf945ab96d6fbe423531e0ad1aec07d71" name="dovecot23-fts-squat" arch="ppc64le">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="8c987f5477ac18c2d28d46d2206a91178528d3fc20adb96a4b797f7c161548ab" name="dovecot23-fts-squat" arch="s390x">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="0a162d5245bdf838256864c5cc23fa150cbfe345306f532b6951bb8f680187a0" name="dovecot23-fts-squat" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="55.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="mrueckert@suse.de" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="varkoly@suse.com" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="varkoly@suse.com" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="varkoly@suse.com" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="varkoly@suse.com" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash. (bsc#1174922)
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
    (bsc#1174923)
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch</changelog>
  <changelog author="varkoly@suse.com" date="1623931200">- CVE-2021-29157: Local attacker can login as any user and access their emails
  (bsc#1187418)
- CVE-2021-33515: Attacker can potentially steal user credentials and mails
  (bsc#1187419)
  Add upstream patches:
  CVE-2021-29157.patch
  CVE-2021-33515.patch</changelog>
</package>
<package pkgid="8f749e651ca5358eac09dd390357cba69a093d9bbcad18da66804edb426bde6c" name="doxygen" arch="aarch64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="23d4e2be9d4a492969b789dd09d6802d74baa72739724a7fed8d1e889fa843e3" name="doxygen" arch="ppc64le">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="d5b85b57d662c03d5fe763cddc83c4d717b8114c37a5e8b0cf69fe108bcc7a1b" name="doxygen" arch="s390x">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="7bc52392652afa208ab07f72f53cbae3616f177f001c5c203654d016645c57cc" name="doxygen" arch="src">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1409227200">- Doxygen 1.8.8
- New features:
  * Support for PlantUML
  * Add BREAD_CRUMB_TRAIL
- A selection of bug fixes and updates as listed in
  http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_8</changelog>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="6d0721ee0fda2ae183658fa53459bd1cf0e475c9ecdb5939218bd251d49ca016" name="doxygen" arch="x86_64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Split documentation to separate package
- Do not bundle pdf documentation
- Generate html documentation</changelog>
  <changelog author="pgajdos@suse.com" date="1425297600">- remove doxygen-html.sh</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10
  * Change the build system to use cmake.
  * Add support for basic XML syntax highlighting
  * Added documentation for ``` style fenced code block and more
    robust parsing
  * Added function arguments to the LaTeX toc
  * Added support for language codes
  * etc. see http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- removed unneded patches:
  - doxygen-1.5.9-64archs.patch
  - doxygen-1.5.9-man.patch
  - doxygen-1.7.0-modify_footer.patch renamed to doxygen-modify_footer.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="pgajdos@suse.com" date="1444046400">- work around Power8 double free or corruption [bnc#921577]
  + doxygen-dot-one-thread.patch</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Do not link with -pie if we are not compiling with -fPIE</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="2d69bbd789e169066b40d0db19296e1a1460715ba9666d029fa3d14fbdf265c1" name="doxywizard" arch="aarch64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="0a8a0c97abc18d26d4bce92fefc7c33571a682e6f98e3601131de18bcff58114" name="doxywizard" arch="ppc64le">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="a1eb3ff593d46aa5160228e8ea85e8225ceea7fb92bd87792960da4a1e939211" name="doxywizard" arch="s390x">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="0ac315751d2edd4a0991cc13b5d0f94780269cbf9ead5c18740e603a2d2cff81" name="doxywizard" arch="src">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1377518400">- updated to 1.8.5:
  * Added SOURCE_TOOLTIPS option for advanced tooltip support while
    source browsing.
  * bugfixes</changelog>
  <changelog author="pgajdos@suse.com" date="1388664000">- updated to 1.8.6:
  * many bugfixes and features, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="pgajdos@suse.com" date="1399982400">- updated to 1.8.7:
  * many bugfixes and features, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1409227200">- Doxygen 1.8.8
- New features:
  * Support for PlantUML
  * Add BREAD_CRUMB_TRAIL
- A selection of bug fixes and updates as listed in
  http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_8</changelog>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="76af6032606f042312836f2e325c374b92024f7c1cad2552cada92c2bc32453c" name="doxywizard" arch="x86_64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1423224000">- Update to 1.8.9.1:
  * bugfix releas, see
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
    for details</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="pgajdos@suse.com" date="1439812800">- updated to 1.8.10, see doxygen.changes
- move tests to doxygen.spec
- remove doxywizard-1.5.9-flex.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440158400">- Set proper minimal cmake version required
- Use system stack for cmake params and obey cflags
- Add patch to build required static libs:
  * doxygen-no-shared-libs.patch
- Refresh patch:
  * doxygen-no-lowercase-man-names.patch
- Add patch to avoid no-return-in-nonvoid function error:
  * vhdlparser-no-return.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1440676800">- Move checks to doxywizard package to avoid build cycle</changelog>
  <changelog author="foss@grueninger.de" date="1451995200">- Update to 1.8.11
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- Update patch vhdlparser-no-return.patch
- Remove patch doxygen-no-shared-libs.patch which is included
  in upstream</changelog>
  <changelog author="pgajdos@suse.com" date="1451995201">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="c60dc3ce4108218d5c8b0d87d33171a466b4e8839960b5de0aceb5d7ac77c19e" name="dpdk" arch="aarch64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="ac6890fcd400cb43c5e5d3eec8bfc75a496c2d5bf59932077edb42bf243ce6ba" name="dpdk" arch="ppc64le">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="42f552b4128529a5aa0fbc6cbc023ef8432ad5219c5331610a6c484cccf033fe" name="dpdk" arch="src">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="bfd140369f495e8a6c109914033f1bb8078d88812ee7faad9c51373deddd3d19" name="dpdk" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="8be395896c063865debf77c0509153920fe7c15ada66106ec0032454268daf81" name="dpdk-devel" arch="aarch64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="f7798319623eb0fba80ea5873c6df1e22125b226678d40c946d30086bebaeec3" name="dpdk-devel" arch="ppc64le">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="0dbbec2b2739fb132375dc7d11584413bb448bd586047d50cd8f450a08d93580" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="c3e89492837b5bce702b2684db0dcf9aedfb6070062625f6b6683c5b22c330a5" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="1db1ab63f70c747ee5bab0bcd26bdab148e9433ae68df62ed1ef3a8ca963bfcd" name="dpdk-examples" arch="aarch64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="1043fdb55a610d4303ab734b1c37b8068c20f117999eec6bfc79e1eee16ec212" name="dpdk-examples" arch="ppc64le">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="7514c65c13a7e5676a8a255d8e2b50d0de168c4b31196225cb6cfee10af9d9dd" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="429fe84b70fba80e680e638e280eece0abeeb99d9c1fe2b87c64cbded2e18d18" name="dpdk-kmp-default" arch="aarch64">
  <version epoch="0" ver="19.11.4_k5.3.18_59.5" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="dddf63c1e3f34825facd3f8b15366f9ddc2f3e90aaabb52bd452bfbe108a4e03" name="dpdk-kmp-default" arch="ppc64le">
  <version epoch="0" ver="19.11.4_k5.3.18_59.5" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="8d463386bb52d15c337483d77b1056c7b965768c2bca0adf834b3cbb6656f4e9" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_59.5" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="e69537a1de62fe8a49e763d1d114f74c514cf049048de8b1e0d727c42572cba4" name="dpdk-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="19.11.4_k5.3.18_59.5" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="ff1948817d9a98da462a5865f8b98a0c3d709f9be1fc7a1880bdc064a1668482" name="dpdk-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_59.5" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="3d1d173c1c1674fbace9674fc72080aebee0a756b956ca09a00920f34aed8e5c" name="dpdk-tools" arch="aarch64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="071bcc0a27cc8755411178dea236aaa8e3235f4e502d5ace40573b78603587f7" name="dpdk-tools" arch="ppc64le">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="7545875b31704aebc404c14a2502ee24f1e4e7f8de0a3093126a6c6dfebf0c9c" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="3725b8267fa6692442172fde29f3d390b12144f3596a79387163b40914c6ec1f" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b752e64cad7941c0d10f229b98b67fc0fad9ba81e35afcf1004912594b76362b" name="dracut-kiwi-lib" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="0dfb21df8e9dcc72d69309f2fbaa855e536d037e17e582e710a81c7a1182f0db" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="cf3b38573fbfa2de4f231afe46f7ad1498d4d2bde7876556c79f9673faaf9a92" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="3649f5d8a8b27e618bbace48ab77e9d72e0e34da6cb4c12be97251efb28a296f" name="dracut-kiwi-live" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2dab1daf0989c3c3313021edb1c3d231a14bf6a057b6a6f90c76e3d0534119bc" name="dracut-kiwi-live" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e3a112e7902e5f54bbc313c074cb355265d6f509b78e3f0509bab11257140861" name="dracut-kiwi-live" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5992b938ca7d86c6fb467e7aeddb477790d3dedc6640a5c2f10c2dda20df8e94" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="72f5c03e5b018ca20af7d0055d979a8b1308a69786dd603f1f49dcd808d2ab87" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="44e3c25539b9d0373da7e37a444c036064f4531a0dde5a354765da24c165e778" name="dracut-kiwi-oem-dump" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="345f091d90490716df3f3d44dcbb297f6202a35f895e6a1317cb089b846293d8" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ac0329a686d117bc963777edaaac93d271d998995ee831a3d395ad1f1aa75c8d" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="38582fd48897fc49f4e6a6f5e7fb9c6f246316b40593f7d9965a8091f2287e47" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e967ddb427fc8e84744918035f1dd49a1a5bf750bc6449c5631465982c6b3cae" name="dracut-kiwi-oem-repart" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="994294c911e5cfb24ad80fa902376004871bc7bf9f170364318425f03549aa98" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="129ad604b52c1e712cd5116a13521ad972fcd714979814827ef65f28b11869a6" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d7724568b5951537cc0fb7f5054197609f1ffda9e532e22640134019302ebe2d" name="dracut-kiwi-overlay" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b6f6462bb63856e58bb85b9c5036d40c9625c295533b7890284134d99b88bbce" name="dracut-kiwi-overlay" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d62c1aa0ed33553d4fc16a2b2a7a2e9aa9f58f99f101380a14c4af013939d466" name="dracut-kiwi-overlay" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="aa945e606d685d602127eaecaaa72bf10cf81778335447ad7064420f4847de2a" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="014cef9cdac6eab20e95fe3e11a1ff80521129dd175fe8853d7dcd6a84c1e42b" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="3.6.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nwang@suse.com" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nwang@suse.com" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="dakechi@suse.com" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nwang@suse.com" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nwang@suse.com" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nwang@suse.com" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="xarbulu@suse.com" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="xarbulu@suse.com" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="xarbulu@suse.com" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="xarbulu@suse.com" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nwang@suse.com" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nwang@suse.com" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nwang@suse.com" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nwang@suse.com" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="30ab400e6d1ac5877b1efe34e8493262055b9dbc9e6e40c53e912ace790e3450" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="3.6.1"/>
  <changelog author="nwang@suse.com" date="1557748800">- Initial version</changelog>
  <changelog author="nwang@suse.com" date="1557921600">- Version 0.2.0
  * Add description in pillar.example.
  * Support more parameters in global_common.conf
  * Fix bugs in initial sync.
  * Add promote/demote state.
  * Use grains['host'] for primary node.
- Basic manual test PASSED</changelog>
  <changelog author="nwang@suse.com" date="1559736000">- Version 0.2.1
  * Polish the README
  * Add travis file for auto package to obs
  * Change node names in example
  * Modify state ID to avoid conflict of other formulas</changelog>
  <changelog author="nwang@suse.com" date="1561377600">- Version 0.2.2
  * Support make file system after initialization
  * Support mount to specific folder
  * Add habootstrap-formula pillar/tempalte</changelog>
  <changelog author="nwang@suse.com" date="1562587200">- Version 0.3.0, jsc#SLE-6970
  * Move to SUSE org
  * Add SUSE manager support</changelog>
  <changelog author="dakechi@suse.com" date="1563796800">- Version 0.3.1
  * Change the requires to salt-formulas-configuration as this is
    the virtual "provides" shared by salt and SUMA to guarantee that
    the formula works integrated with both (not at the same time).
    (boo#1142306)
  * Change the directory permission to avoid file conflicts with
    SUMA.</changelog>
  <changelog author="nwang@suse.com" date="1564056000">- Version 0.3.2, boo#1142762
  * Restructure the deploy and examples directories
  * Add examples of using NFS formula
  * Fix the issue of mkfs and mount NFS share
  * Polish the form.yml based on SUMA4.0, change some default values.</changelog>
  <changelog author="nwang@suse.com" date="1565179200">- Version 0.3.3
  * Add prefix to ID to avoid conflicts
  * Install xfsprogs when need to format xfs</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nwang@suse.com" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="xarbulu@suse.com" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="xarbulu@suse.com" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="xarbulu@suse.com" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="xarbulu@suse.com" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nwang@suse.com" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nwang@suse.com" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nwang@suse.com" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nwang@suse.com" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="7bb88a31fd12dab3701ce8f3051600e9748012f4024f4acdd7e548ef2f1dbad5" name="evolution" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="8b1f1dc99a2cdb2600b122d63164262811c597d3706812406dac81c910161d0c" name="evolution" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="97adcd9b3f558b25570cc00553248c974b4a362db772e6fd36fc372b59c8724b" name="evolution" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="59d6e9d2045032894e8a66d624379a63a182d544c2a522ab4014030aec42d787" name="evolution" arch="src">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="eb980179598ae968dfefc0411366c9f5d00d5b50f330cc75b355d3b93b944246" name="evolution" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="a65442ae1f57e1ba5ff09d1b5585f03fee8552f09a45f68206254c99fa4a7daf" name="evolution-devel" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="0a22fab0c53db55f63032f326b15f70e5fea56f95520a36212530ddf39efd9a0" name="evolution-devel" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="017df1e880b5d79a594ef77385b08f52ef867b94f4c1fb25aa139aad374b4733" name="evolution-devel" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="555aaa34bb438f3d87b968e2f6416deb44ee2c93cf286deb696001d028a66215" name="evolution-devel" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="1c31612b064f5e18bcc96e87498933cc4e33ea5c451c6f6229c2b98d2ae2cf3a" name="evolution-lang" arch="noarch">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="38a3beeb6d2992cfd3b858c09a6c17b6454d94daa4c9870e3453d94cebcdbb15" name="evolution-plugin-bogofilter" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="a762db9b52002a2772f1e8503e75f93ce0e4833c61b96092566a5f159a27c467" name="evolution-plugin-bogofilter" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="a627b3612be87805c363a7207963e69008637695e004176ea69f371d3297015e" name="evolution-plugin-bogofilter" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="83b6a87e332ae2aae121e0f5a90a29651e093be4db1bb61eb14083d470b2ae85" name="evolution-plugin-bogofilter" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="b989f6cd953b035c0eb7c1802a5bcda770981acb5e7a0d08c92374b1b39e12d9" name="evolution-plugin-pst-import" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="7230a70e3d8d77aeddf198abb8a29a9900b2ba09543d2a079452ee558632dfc4" name="evolution-plugin-pst-import" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="07f88f002164de94be8a1cff09061e8d659b04bcf6871853d1b48b18559f2073" name="evolution-plugin-pst-import" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="aa1c07ef2789b31282e8a1b8e43d8c6d1952c008afd8185bc65957fdf6f3fad0" name="evolution-plugin-pst-import" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="d48aae009ebfeb9c44f79050b0001c1866da07363d13d62b50bba195b88f78e2" name="evolution-plugin-spamassassin" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="7b526f9e80904356119465728c876e4cf0ab59e92298df2ebb9018f82ae866a0" name="evolution-plugin-spamassassin" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="74cbb43d5783b98339211f9f116ff76f32db446b8d6f4d07f4a4ff779514e5f0" name="evolution-plugin-spamassassin" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="129512b831ef50aa951b04b7e4aefef75989bd116a251339c9fecf5981668974" name="evolution-plugin-spamassassin" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="3eaa1358734f35cb86fd97b6f0908a06a46deeac10069dbb05ee47b0139bfb80" name="evolution-plugin-text-highlight" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="7a6bfa7d16144ba7e0c1ee49a8f2da1720f86b4e399e770cd637ad968ee60dba" name="evolution-plugin-text-highlight" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="02c61022cca8c6b5d2f3fabf38a30780620ba1d6d6bce68bb88846b1c9366626" name="evolution-plugin-text-highlight" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="ac98deb89940dab06e4ebcaae2adb95551f1dc755788ac6f442c6fd3a0833ff8" name="evolution-plugin-text-highlight" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="4fa9ff438c33173c8c233b812e5d06e8bf5451e33024b6edcd528ee07ecd04b9" name="exfatprogs" arch="aarch64">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="c8cf2661a13fcee3e505c0e669281d76b7d659654512354a8e9c3c60a15fd38c" name="exfatprogs" arch="ppc64le">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="26e46da0abf131f47775b04f8cf9908695dee3a80566f86c6f32fa514a4abc7e" name="exfatprogs" arch="s390x">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="9f944f8c18c5b4709a28bca21dc18632e610f9f392a673d2587dd1e8d88e2d81" name="exfatprogs" arch="src">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="693069578958b6fc9ee2ebbccc9dcb1312cc0f95694c662cfc7a29d4a4e69709" name="exfatprogs" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="08dfd1dbc5531ffd6dcc651e56aa94c25950ede335ccb115265fe5c1bd3fbfd8" name="expect" arch="aarch64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="39d29e782f41f1c7de1207b47c460724a87e3f468322ce100dc2245ac55eab56" name="expect" arch="ppc64le">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="819649a509fe4d1592daf20f6623a669cbb5ef6aa8bd35fb06c2dc1c6fb6d76d" name="expect" arch="s390x">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="17c7261fae0f8fae337c75e98f3ec500b20905cc872a8d2a3d7732e180d1687d" name="expect" arch="src">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="max@suse.de" date="1206014400">- Update to version 5.44.1.5 from CVS:
  * Improved internal buffer management
  * Ported script-level commands to the newer Tcl object API
  * Optimized regular expression matching
- Split off a -devel subpackage
- Don't package the example subdir anymore.
- Fix all critical and part of the non-critical warnings that
  show up with gcc 4.3. To be continued...</changelog>
  <changelog author="max@suse.de" date="1207224000">- Fixed swapped arguments in prototype of exp_cmd_init()
- Adjusted installation to the new Tcl file system layout</changelog>
  <changelog author="aj@suse.de" date="1210075200">- Add missing return values.</changelog>
  <changelog author="meissner@suse.de" date="1223985600">- fixed fortify implicits.</changelog>
  <changelog author="max@suse.de" date="1223985601">- Update to version 5.44.1.11 from CVS. The changes mainly consist
  of our former expect-fixes.patch and expect-warnings.patch, plus
  some more bug fixes, e.g. for the [expect -exact] crash reported
  at bnc#427270 .</changelog>
  <changelog author="max@suse.de" date="1243252800">- Fix buffer overflow in the "stty" command
  (bnc#506873, bnc#501291).</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="max@suse.com" date="1317988800">- New version 5.45:
  * Examples now use the expect package instead of /usr/bin/expect.
  * Countless other bug fixes. For details, see
    /usr/share/doc/packages/expect/ChangeLog</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="3c7e64886c205b0dd015c25057463c23a4eb9f737416580a2ed80decfbc13d3a" name="expect" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="0cc177422a8a630d4c3147271dcbd5ede074415a1278076066763718731cba8a" name="expect-devel" arch="aarch64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="3a746943118bbb9c855f0e06480545c2457b7ad2706cea70843055f00342774c" name="expect-devel" arch="ppc64le">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="100c719f221b39decd29264788c40e88600fb6e4aec05c4000740b7dd0f42f21" name="expect-devel" arch="s390x">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="c9b7921d36134e9f6fc086cbff2333993cd63ea9d9ac2455e3ce43b7283a344b" name="expect-devel" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="1b5de086b2981f049c4572c0bee069e0f6700436df50316dff42622340d24d35" name="ffmpeg" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="f1683c3283a67055e383ffb68c537559ca27f398edb672657113690d89c617c0" name="ffmpeg" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="261719e070ca068d30f7cc10de83efa96e88c15cefd7b740c935a9007b791322" name="ffmpeg" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="2d716767526faeed72ae4e6c0759ee5ab607edd0e849378407049e68e647d3fa" name="ffmpeg" arch="src">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="1f42cc28b44f6a90329f399db48461bafb050498c15cb69b01c7327066b65a53" name="ffmpeg" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="68ef90e0be05ae2ea6845a03d483b0e9728db1c476e8b89b47a4c58cf983a2c8" name="ffmpeg-private-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="6c8bd387361b790ce51a785aa33cc3d52e6af29538eea7c6ae8d7a871fcc742b" name="ffmpeg-private-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="de0b52020e42e2f0236838d59f033f3cb6987194cc62f98fc3a00a7543dc102d" name="ffmpeg-private-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="7eebd67d4372fa62ba517f01945000031ebbd837f622cb034d3d406208247f28" name="ffmpeg-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="d757156eddfd7995b07a921844319939af4570d5cf0e1f68d6eb6e5d35b8b9a0" name="file-roller" arch="aarch64">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po %{name}" to the call.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1532779200">- Update to version 3.29.1:
  + New features and user visible changes: Removed app menu.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 3.29.90:
  + Restored app menu.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 3.29.91:
  + Bugs fixed:
  - Fixed loading of .epub and .crx files.
  - Path traversal vulnerability. Do not extract files with
    relative paths (bgo#794337).
  + Updated translations.
- Refresh patches with quilt, use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0:
  + Updated translations.
- Remove lang package from recommended package as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.1:
  + Removed the application menu.
  + Updated application icon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.2:
  + Improved app icon.
  + Overwrite dialog: added button to skip all existing files when
    extracting.
  + Use G_DECLARE_TYPE boilerplate.
  + Updated translations.
- Disable file-roller-3.4-change-archiver-priority.patch: Needs
  rebase.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550232000">- Update to version 3.31.90:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="0ab5a261d943f6fa1904e103b8db5d688fa6c73e798b5d015c7d9522d2777319" name="file-roller" arch="ppc64le">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po %{name}" to the call.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1532779200">- Update to version 3.29.1:
  + New features and user visible changes: Removed app menu.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 3.29.90:
  + Restored app menu.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 3.29.91:
  + Bugs fixed:
  - Fixed loading of .epub and .crx files.
  - Path traversal vulnerability. Do not extract files with
    relative paths (bgo#794337).
  + Updated translations.
- Refresh patches with quilt, use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0:
  + Updated translations.
- Remove lang package from recommended package as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.1:
  + Removed the application menu.
  + Updated application icon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.2:
  + Improved app icon.
  + Overwrite dialog: added button to skip all existing files when
    extracting.
  + Use G_DECLARE_TYPE boilerplate.
  + Updated translations.
- Disable file-roller-3.4-change-archiver-priority.patch: Needs
  rebase.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550232000">- Update to version 3.31.90:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="1feacdb9cc8ea89a543ae99f89891686fc19ded5b7476452add62349fc815edc" name="file-roller" arch="s390x">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po %{name}" to the call.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1532779200">- Update to version 3.29.1:
  + New features and user visible changes: Removed app menu.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 3.29.90:
  + Restored app menu.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 3.29.91:
  + Bugs fixed:
  - Fixed loading of .epub and .crx files.
  - Path traversal vulnerability. Do not extract files with
    relative paths (bgo#794337).
  + Updated translations.
- Refresh patches with quilt, use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0:
  + Updated translations.
- Remove lang package from recommended package as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.1:
  + Removed the application menu.
  + Updated application icon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.2:
  + Improved app icon.
  + Overwrite dialog: added button to skip all existing files when
    extracting.
  + Use G_DECLARE_TYPE boilerplate.
  + Updated translations.
- Disable file-roller-3.4-change-archiver-priority.patch: Needs
  rebase.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550232000">- Update to version 3.31.90:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="8e0ae68ae647e5d14dba1b8078beec4d7cfc229873bdd36163040317792834b3" name="file-roller" arch="src">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po %{name}" to the call.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1532779200">- Update to version 3.29.1:
  + New features and user visible changes: Removed app menu.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 3.29.90:
  + Restored app menu.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 3.29.91:
  + Bugs fixed:
  - Fixed loading of .epub and .crx files.
  - Path traversal vulnerability. Do not extract files with
    relative paths (bgo#794337).
  + Updated translations.
- Refresh patches with quilt, use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0:
  + Updated translations.
- Remove lang package from recommended package as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.1:
  + Removed the application menu.
  + Updated application icon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.2:
  + Improved app icon.
  + Overwrite dialog: added button to skip all existing files when
    extracting.
  + Use G_DECLARE_TYPE boilerplate.
  + Updated translations.
- Disable file-roller-3.4-change-archiver-priority.patch: Needs
  rebase.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550232000">- Update to version 3.31.90:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="4569b4a5c92da64e1e8014dd28dd9d2ec2147a41c1a5ad788c052ce4a2f9d4c2" name="file-roller" arch="x86_64">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po %{name}" to the call.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1532779200">- Update to version 3.29.1:
  + New features and user visible changes: Removed app menu.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 3.29.90:
  + Restored app menu.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 3.29.91:
  + Bugs fixed:
  - Fixed loading of .epub and .crx files.
  - Path traversal vulnerability. Do not extract files with
    relative paths (bgo#794337).
  + Updated translations.
- Refresh patches with quilt, use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0:
  + Updated translations.
- Remove lang package from recommended package as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.1:
  + Removed the application menu.
  + Updated application icon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.2:
  + Improved app icon.
  + Overwrite dialog: added button to skip all existing files when
    extracting.
  + Use G_DECLARE_TYPE boilerplate.
  + Updated translations.
- Disable file-roller-3.4-change-archiver-priority.patch: Needs
  rebase.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550232000">- Update to version 3.31.90:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="390997270ee9c86f1457ef17e9ca46a018675283787c9ec73eaa90dc381f6346" name="file-roller-lang" arch="noarch">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po %{name}" to the call.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1532779200">- Update to version 3.29.1:
  + New features and user visible changes: Removed app menu.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 3.29.90:
  + Restored app menu.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 3.29.91:
  + Bugs fixed:
  - Fixed loading of .epub and .crx files.
  - Path traversal vulnerability. Do not extract files with
    relative paths (bgo#794337).
  + Updated translations.
- Refresh patches with quilt, use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 3.30.0:
  + Updated translations.
- Remove lang package from recommended package as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.1:
  + Removed the application menu.
  + Updated application icon.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.2:
  + Improved app icon.
  + Overwrite dialog: added button to skip all existing files when
    extracting.
  + Use G_DECLARE_TYPE boilerplate.
  + Updated translations.
- Disable file-roller-3.4-change-archiver-priority.patch: Needs
  rebase.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550232000">- Update to version 3.31.90:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550491200">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="43c0ec30426bf54cc18afe247225cd01ef405dced001b8082dff5933c77d1990" name="fltk" arch="src">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="pgajdos@suse.cz" date="1282824000">- update to 1.1.10
  changes since rc3
  - Widgets now remove stale entries from the default callback
    queue when they are deleted (STR #2302)
  - Fixed selection bug in Fl_Int_Input (STR #2292)
  for all changes see the /usr/share/doc/packages/fltk/CHANGES</changelog>
  <changelog author="pgajdos@novell.com" date="1310385600">- updated to 1.3.0:
  * Added UTF-8 Unicode support throughout FLTK and Fluid
  * Added Fl_Tree widget for hierarchical views
  * Added Fl_Table widget for widget layout
  * Added Fl_Native_Filechooser as a widget and global options
  * etc., see CHANGES
  * removed upstreamed and unneeded patches</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)
- Implement baselibs config</changelog>
  <changelog author="pgajdos@suse.com" date="1324468800">- fixed linking library with as-needed [bnc#736410]
  * as-needed.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1324555200">- buildrequires automake</changelog>
  <changelog author="coolo@suse.com" date="1329739200">- let the devel package buildrequire xorg-x11-devel</changelog>
  <changelog author="coolo@suse.com" date="1343304000">- buildrequires on specific library sonames is breaking build</changelog>
  <changelog author="pgajdos@suse.com" date="1353412800">- updated to 1.3.1:
  - Fixed utf_strncasecmp and utf_strcasecmp
  - Moved all inline constructors into source file to avoid bad DLLs
  - Fixed Fl_Widget::copy_label() and Fl_Window::copy_label() when
    called with the old label() (STR #2836)
  - Fixed Fl_Input_::maximum_size() documentation and replace() method
    to honor maximum_size() as number of allowed characters (STR #2747).
  - Fixed a potential crash if Fl_Double_Window::flush() was called
    before show()
  - Fixed regression (in FLTK 1.3.0) that could clear a radio
    button by using the keyboard (space or shortcut) (STR #2748)
  - Fixed fl_pie() drawing too small on X11 (STR #2703)
  - Fixed Fl_Menu issue with unusual menu flags (STR #2680)
  - Fixed Windows DLL import of fl_xid() (STR #2670)
  - Added Fl::screen_work_area() functions that compute the work area
    of a screen. These functions improve the positioning of menus.
    Changed Fl::x(), Fl::y(), Fl::w(), Fl::h() functions
    to return the origin and size of the work area of the main screen
    (STR #2695 + 2697)
  - Created the FL_SCREEN_CONFIGURATION_CHANGED event that is triggered
    when a screen is added, removed, moved or when resolution is changed
    (STR #2600)
  - Improved the description of page size and orientation by
    Fl_PostScript_File_Device.
  - Added support for horizontal wheel movement under X11 and MSWindows Vista
    and above (STR #2644).
    1.3.1 ABI FEATURES
    (To enable the following ABI features, put: #define FLTK_ABI_VERSION 10301
    at the top of your FL/Enumerations.H and rebuild FLTK and your app)
  - Fl_Tree optimized to support large trees (eg. 100k items):
    Added _next_sibling and _prev_sibling to Fl_Tree_Item class,
    and support methods.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1357819200">- updated to 1.3.2:
  - Removed unnecessary drawing calls (STR #2898)
  - Fixed regression in FLTK 1.3.1 for unbundled Mac OS FLTK applications that
    did not appear in dock nor have a menu bar (STR #2890).
  - Fl_Table::clear() now calls table-&gt;clear() for consistency. (STR #2889)
  - Fixed Fl_Scroll widget that fails under Mac OS X 10.8 and retina display (STR #2887).
  - Prevents scrollbars from drawing when widget is sized too small to be visible (STR #2886).
  - Documented how to make a Mac OS X FLTK application launchable by dropping files on its icon.
  - Fixed a Mac-specific issue appeared with OS 10.8 (Mountain Lion): long delay before
    opening when the application is started by dragging a file on the application icon.
  - Fixed use of PNG image from im-memory data (STR #2884).
  - Added static Fl_RGB_Image::max_size(size_t) to limit the maximum memory size allowed to
    RGB images (STR #2881).
- add fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch to avoid adding unneeded libraries
  to the link command of dependent packages. Those libraries didn't even need to be installed.
- remove automake BuildRequire
- substitute %if crazyness for pkgconfig() style BuildRequires
- correct libfltk1 group
- get rid of the fltk package which only contained duplicated doc files, probably by a packaging accident
- add fltk-1.3.2-verbose_build.patch
- add fltk-1.3.2-underlinking-patch
- remove fltk-as-needed.patch (integrated into fltk-1.3.2-underlinking-patch)
- don't add -fno-strict-aliasing to CFLAGS. Upstream already does that
- don't set glflags and fltkflags for make. I don't see it doing anything useful</changelog>
  <changelog author="pgajdos@suse.com" date="1359115200">- by previous change, files of fltk maint package was moved to
  fltk-devel, keeping fltk empty; thus:
  * libfltk1 obsoletes fltk
  * fltk-devel provides fltk</changelog>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="35ff5fdaf2e6f251eab54bd3ca0e519327f1a51ea4fca1f0e360145b5b82bfdf" name="fltk-devel" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="7474a024c963e814b3c7b010fa47f34965a396228b4b4cf1e6a898ad9d5d038f" name="fltk-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="2efaf3b7b7adc69394d84cf459f00f2b5730e4386165d531693fae4fbb421f11" name="fltk-devel" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="cd3e5e5d645f9237b6482d3e4e2059af5f5ab0b499a08bcd0633410a069f8adb" name="fltk-devel" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="2128e79eea7c460566dfbd0e64e48e5f7cd245609af792bcf0c96d6f4bce7b31" name="fltk-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="ce3859d4765d4927795474ba6917cc976e16c5bb66beceeae3e2a18167153cd2" name="fltk-devel-static" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="b11850947bd12707ec3d4430a75ca1e9a760214c849934583546c3fd314e0367" name="fltk-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="4ef9b451813326bbd09591196fd66f0d7d21125a6698b3743c066c600cb1d9d9" name="fltk-devel-static" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="f271dc8b5eaf55f3df2919f00b6d47f113a89faa58c7100f5aca3d8e7de1cc2a" name="fltk-devel-static" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="ecf944fe9d508583016acc2723346b9828b58c7579273c4dce69da450874a19f" name="freeradius-server" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="5aef1f82c89f198bf37bfa3615d6d1c0b4a15a255b523dd508b99599175577f5" name="freeradius-server" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="4d80a38e2337867738beead9eb539919276f400c686cac9863d35e8170462806" name="freeradius-server" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="5136acc136a74bbc8fb9cb9f1e84ea60fa1853907af320e2e8c1672c7c148a42" name="freeradius-server" arch="src">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="be6f5fe56965004b9387d71a52dcefab68594f78dfd182e10f6733c3ef701459" name="freeradius-server" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="83d0d08c4461d93d1208611569da93b2705d5f77dec386ac89d53276fa8f12e3" name="freeradius-server-devel" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="d92d80c9a39a37e83231247aad9c3f72d8b9255839c96d54bcdfe2bcf3286bc8" name="freeradius-server-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="c8459f3978f973ea1181540909cd3ebd4a1ac95c1e3521fd90c75cb5194e82d3" name="freeradius-server-devel" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="456695ed7bc534ee0d18ccefb6b5767c7b87d27730ab248fd43bb2d04dd9b385" name="freeradius-server-devel" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="932b81fc6aa88361b6ed0ea4538d54f13767b67e3c5597bcbb1eac2e5f634b58" name="freeradius-server-doc" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="7ca88bd7fb360695780344f060a7f3ccd2c153659fd3898a4afd647e4fadcfe3" name="freeradius-server-doc" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="e753393a4d31c6cab0888b1545a665ce7084729557aabc96502e61221f71f4a7" name="freeradius-server-doc" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="756346243d3e1cda908264451d9615d9cfab7600901e5766c5853fd9b76312c5" name="freeradius-server-doc" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="644a11fbc9d4df57e591e625871fae228a61420c7bdd64858bb078d93eaf4bd7" name="freeradius-server-krb5" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="5f51c4479b55819512fb0c911af10a62e9bbd15f9a144843e8730f18310a859c" name="freeradius-server-krb5" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="99636f37805fa30a8ce3b2fb79c7e9149025a20273007b4ce4747aa2bd6e6c72" name="freeradius-server-krb5" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="8cc10aab9f9a396c2b61ff2599da9ce3cc595aab202b78ca3cf78e8faf965986" name="freeradius-server-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="0a6220bbca13647da56feaba5f90dc5a911a079f96da16bf12b487257537a3bf" name="freeradius-server-ldap" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="396fbd1144258168ef04ef3d018e135c44f54b602d08428a889bcad1afe0eda1" name="freeradius-server-ldap" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="ef7998b1634cdd5785a11707dfc7fe25f233672e05a87e5e0adf68667227d473" name="freeradius-server-ldap" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="3a28375ea4ffcde1e19042d38c53dfde82f219319bee3ce2a2d7cd4a1ea6c5ba" name="freeradius-server-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="f96d507a9d4b4f1e1e25ad080951751b292141b1a7c3b04cb32830ef56386c2f" name="freeradius-server-libs" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="a9ea6fcbd79957ae67eaaf247453ff57ad6b939268baefe48f8d5f496928b499" name="freeradius-server-libs" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="963c0235df0681820b255cec8a19bc21660d66930b41d91015ee0706960ec9c2" name="freeradius-server-libs" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="477df48ed1fe1a333bc46d4cbb8503c386be8ce84006d02ce82f9702440d09bd" name="freeradius-server-libs" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="b9f969b52b7bdcdd58561e083c970abea1cb84615352137f8eb5630c9cd7f315" name="freeradius-server-mysql" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="99fe167138aadbb39e15b0d4d06d46e08aade38bd212888170aad1b0b8aaae18" name="freeradius-server-mysql" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="aea865f2490397a88b209a1282f6bc922f508d45df84fcbc4fbef13bd563a7dd" name="freeradius-server-mysql" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="4e0ef2edf33cb4588f9079012c8f6d3eb7c0827a4d11b0459586527c31c1fe4b" name="freeradius-server-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="e5f5057d4a12d5fbaa596ee0da5e5fc72041d499123c02e41de29d6a9b0ba8e3" name="freeradius-server-perl" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="c0af195d0e6f3002043947f8f252b8df520c5850e67c3cc050a79c12ab01c17f" name="freeradius-server-perl" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="9e05c74e08cd856219b6c4a802b92eba12f3cc259ea4e0ca2fb3b13432139e4c" name="freeradius-server-perl" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="87da8bb3a6b4914391dbefcaa2d65d2cc14a20e7de245fc4874b8da860a06247" name="freeradius-server-perl" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="7092a8fa1915cdb50503dd1f04907f9962e3618a7e9e4e114f7e75519a275fae" name="freeradius-server-postgresql" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="2d2e07db868e12cf70e9eaa4fa769aa04eff405d30644cb8688b08ffdc82623b" name="freeradius-server-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="9a2bb07c42ea9cfb0e2e5771e9abfa6ea5e4b6ebc95fe3f7f78fda9e4d7ec7da" name="freeradius-server-postgresql" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="687b58f6e120fb24043bf4c0f227604fcb7621169c805dcf08a4b10f154d5334" name="freeradius-server-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="30ac589d865fba79775dd097fc9cd79c5097963b284e4dc083af17dae4a0b263" name="freeradius-server-python3" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="f426d46c1ae1c64ddad289c6dad4c90cf060494e4f28ebdc12b93a254cfb1114" name="freeradius-server-python3" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="6c09459ae1782018dca18b7d13431d6ac6d39a43ab08bebff949b0afa0864ea3" name="freeradius-server-python3" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="6d8e70540a13871075081903fad301e3d3bbbe1752ab8bc853fc071718afeee9" name="freeradius-server-python3" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="ef89ef5db0a5dd0c126026a37b19314eae2b8512f524b73eec606bf4280bf881" name="freeradius-server-sqlite" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="97f1e83423951b036ccbc92144076f74314c2ff5204ba3d27a622c3cba3b48e4" name="freeradius-server-sqlite" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="8dcd6db1e20c5c3a4ad0e130d68eb2307d984f327206ab915a9b26fa7a404b7b" name="freeradius-server-sqlite" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="4fb945c478e90a8bf20ad46fc10ea36b91f21476bd75839f5d53c1fbe0533a6d" name="freeradius-server-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="e3b83e3bab97dac22f75f7ec935dfabd8c4a6c1f1b5d7606d0059912fa9cd2d7" name="freeradius-server-utils" arch="aarch64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="c2561d4ea23c9b72faebbac6123f1ca9f72f0d81960d66b6f7f9adb30fc2d41a" name="freeradius-server-utils" arch="ppc64le">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="8a255dd939c36b4bb20b4a3cb7b40194b41ebd72481ad41c1f6c2f2c77670764" name="freeradius-server-utils" arch="s390x">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="90b9f598a3102aef3d303bf0dcfdf31f557d5b7e4aa3a11275cfc1107fcdbc55" name="freeradius-server-utils" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="3.9.1"/>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="michael@stroeder.com" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="michael@stroeder.com" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="jcnengel@gmail.com" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="adam.majer@suse.de" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="adam.majer@suse.de" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
  <changelog author="adam.majer@suse.de" date="1619438400">- logfile_secrets.patch: do not log passwords in logfiles (bsc#1184016)</changelog>
</package>
<package pkgid="a6ea09b4b832ab5842bf21a752bcf1bf7e7c4dbf8cd905b10bd1de18e65816d3" name="fribidi" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="67f7ac3de54a501d3688652700ea618a2843418ed4490bcb8c66f3ee480e905f" name="fribidi" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="3ff55d6a4f1269401c99adb8f162b232f8c6b68527c7cd2a9b46f4e93ca9005a" name="fribidi" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="0fe64c650b6706417cf1e361ffd8717763b54b71ab1623c63556c3efe80a38f6" name="fribidi" arch="src">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="nashif@suse.de" date="1052740800">- package forgotten files</changelog>
  <changelog author="adrian@suse.de" date="1073736000">- add %run_ldconfig</changelog>
  <changelog author="mfabian@suse.de" date="1078833600">- Bugzilla #34267: fix this by adding the compiler option
  "-fno-strict-aliasing".</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mfabian@suse.de" date="1141128000">- add "Provides: locale(ar,he)".</changelog>
  <changelog author="crrodriguez@suse.de" date="1199620800">- update to version 0.10.9
  * Fixed type sizes when stdint.h is not available.
  * Update to Unicode Character Database 5.0.0
  * Fixed type sizes on 64-bit architectures.
- disable static libraries
- remove libtool archive with empty dependency_libs
- do not require gtk2-devel for build as it is unused
- spec file cleanups</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="olh@suse.de" date="1225368000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="b3e5f2b3a4b5274615a1c21ea6b61cbc1c1d14bdc3b8496b9f0c0c52d2f9e1bb" name="fribidi" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="6ceb236da911c3701f29adf63c5064b69cd06dc9654e1afed8ec0fb0125c7ea9" name="fribidi-devel" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="3ad8f6dce775a654546ecf9931ef0a73704dd3d00686ed5c60f31c71807f0c27" name="fribidi-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="d4a92fdff7aa0dfebb951d6ff81590e7c96994964175e491794521cd6b394d4d" name="fribidi-devel" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="2e1817cd4cd7762c33a308aabb788579bd215a5d437b5d252609c6add551d48b" name="fribidi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="cb39a769d28f2a269fca9e704c975b09f2fe301c448125b874eb71e682b9f261" name="g3utils" arch="aarch64">
  <version epoch="0" ver="1.1.37" rel="3.11.2"/>
  <changelog author="ledest@gmail.com" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
  <changelog author="sbrabec@suse.com" date="1564488000">- Prevent crash on invalid PBM with negative dimensions
  (bsc#1142770, CVE-2019-1010190, mgetty-CVE-2019-1010190.patch).</changelog>
  <changelog author="meissner@suse.com" date="1580126400">- Fixed permission handling of faxq-helper. (bsc#1168170)
  - It is fax:trusted       4750 in "secure" mode.
  - Also is being checked and set correctly now.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link /usr/bin/newslock as PIE (bsc#1184124).
  - Modified fixpie.patch</changelog>
</package>
<package pkgid="36a2678e1c80ba1324f4bc13a11d485acb08bc8a4352b1a25c17456167a13010" name="g3utils" arch="ppc64le">
  <version epoch="0" ver="1.1.37" rel="3.11.2"/>
  <changelog author="ledest@gmail.com" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
  <changelog author="sbrabec@suse.com" date="1564488000">- Prevent crash on invalid PBM with negative dimensions
  (bsc#1142770, CVE-2019-1010190, mgetty-CVE-2019-1010190.patch).</changelog>
  <changelog author="meissner@suse.com" date="1580126400">- Fixed permission handling of faxq-helper. (bsc#1168170)
  - It is fax:trusted       4750 in "secure" mode.
  - Also is being checked and set correctly now.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link /usr/bin/newslock as PIE (bsc#1184124).
  - Modified fixpie.patch</changelog>
</package>
<package pkgid="840378a020bd108c73f9f0348a05058120e51d6aafb79e029a54c6d7ba2bd90b" name="g3utils" arch="s390x">
  <version epoch="0" ver="1.1.37" rel="3.11.2"/>
  <changelog author="ledest@gmail.com" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
  <changelog author="sbrabec@suse.com" date="1564488000">- Prevent crash on invalid PBM with negative dimensions
  (bsc#1142770, CVE-2019-1010190, mgetty-CVE-2019-1010190.patch).</changelog>
  <changelog author="meissner@suse.com" date="1580126400">- Fixed permission handling of faxq-helper. (bsc#1168170)
  - It is fax:trusted       4750 in "secure" mode.
  - Also is being checked and set correctly now.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link /usr/bin/newslock as PIE (bsc#1184124).
  - Modified fixpie.patch</changelog>
</package>
<package pkgid="0bb95bf93382296380971f97da59c7b1d31f2047179db0f273175272bab17eff" name="g3utils" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="3.11.2"/>
  <changelog author="ledest@gmail.com" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="mcalabkova@suse.com" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
  <changelog author="sbrabec@suse.com" date="1564488000">- Prevent crash on invalid PBM with negative dimensions
  (bsc#1142770, CVE-2019-1010190, mgetty-CVE-2019-1010190.patch).</changelog>
  <changelog author="meissner@suse.com" date="1580126400">- Fixed permission handling of faxq-helper. (bsc#1168170)
  - It is fax:trusted       4750 in "secure" mode.
  - Also is being checked and set correctly now.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link /usr/bin/newslock as PIE (bsc#1184124).
  - Modified fixpie.patch</changelog>
</package>
<package pkgid="74bf4a13627a30890ba4d6bfa6d9b8a454a9f439ff50ced6139631add8aaa820" name="gcc-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="039e987bf57266af49c881dbbbc51ffa9af688131867b32f5b42dc2a5d539cc4" name="gcc-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="ab6abf01d5123dc047029b41501e6afea0539ca4f26d12551fcf7198f1885b12" name="gcc" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3c1a98e87157baa859a598ae91dbae63cef761ab03760c340731faaf5f37e651" name="gcc" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="5b8f0936edf92b82bab04166c9be1f19595ef13398fe92b590e612a790bde30b" name="gcc" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="828abb29865ecf093a874f6133c7a70b3b1e2c1f795ab3252c4d78789b12e9d6" name="gcc" arch="src">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="49297d3f268d10ecd51abb321ac74e26180f086e4984fcaa793acbdcae555634" name="gcc" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="cb1eb9cda7c7b090b4680bf270c6fbd6a2255561c7be7861a1a9f8cd7e0a8ece" name="gcc-PIE" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="47206f1f3579675dfa3ab537256a8381b640c5f049b735c34f3d142788149264" name="gcc-PIE" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="9ddeda5e46d8df79070119b31f19c78de5f46dad69c0e1174dd162c69d540b1d" name="gcc-PIE" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="fd6ae6e4e86bdd58ea9f4fae3065d0a6fb893cc1a2d61f1cc31302984dbbc811" name="gcc-PIE" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="a1ae706a50a53c3b43a6e6dc29d10e18e2e819e50d9710af00370b481f13c3bd" name="gcc-ada-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="05160b1b9a616855b9bf5973491333028a7dbb73c5f25b3789da7a6cccf84c8f" name="gcc-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="55b4c970cbb9f17e35f0412a8e548c0c6778d4dd8ff3f95b4c2a90a06e748c8a" name="gcc-ada" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="2078aab863a07e69dd1dc99e4a0dba91257619f7c739c19ccfb9a9d72cf13fe5" name="gcc-ada" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="35989bd58c16b140ac425672dc826dd5b82b2b9f23f6717129e0bfd72f02b555" name="gcc-ada" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="366c2d05f43313707d253192bfead2f644a948573e3d77062e521afb752505bc" name="gcc-ada" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="7560c99b7c7602c34358615ce1371f79bbe2003a3a318c9221b5fea2f5bb9e54" name="gcc-c++-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="afdabcccd48ea1a80488136166754354df57616710ceb6f61bda5226d06c1382" name="gcc-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="227b156bf4df154b1b9bb59c61dca29657cb51d00bbb9b7c901f82470d525c9c" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="323f6c5615bfe73f3a6e44e0b22ff4a86bb11ed415685581c8e119cd96a3fa5c" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="abe2c3b266c62d61b4cf6a79d46c685b90cbe5c5b8ed31995039dda5602ad967" name="gcc-c++" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="388e414fb2c4ae2bd0d1185d6a0de9d4413f9dcf6d0b2728c81812e40acc92d8" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="7a6e9ace191049ebbcb25fc8c76359389bd7bfa5d1db333a4acb2211d1d9349d" name="gcc-fortran-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="ae2810945e9c5a807a45b1524a25c60300ef7aa2d0834ab9e6c40f5ab7386135" name="gcc-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="2f8106595ce09126fcd716af4b185a73a898650775b55cc0c10e1582973e82c6" name="gcc-fortran" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="0538c95c6470f10a1f1c6e99cd0a4cde3d913595d9eecbd5df247554492477b4" name="gcc-fortran" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="c687723c81a592073688be423b7e48a6272714e5fee71b3b370b86a632a2f1e2" name="gcc-fortran" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3cee9e0a515b51c0ca3ba46e6e2dc7c74dac572a4bca60dc5e8152376860c835" name="gcc-fortran" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="32a3c422bb881931665622aeb2fa46aea5126d3c1667e31b3fe8f76472aba45f" name="gcc-go-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="53e3049011147eec1f640814d5c8bb6a1a2262b9b13cc0753676fa3fb8bd47fc" name="gcc-go-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3623c904db7db4964112d4e1e1f92df3bbbcd9e37afe16aa2b583793dd7e309d" name="gcc-go" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3d56d873bfe595175cbb3b39687258c95239d7265902a5cbf0f792f4a268c51c" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="86630829846a7a001bed3e9e6e7eb1ec9319d69e3a8ea4229333374cd6305462" name="gcc-go" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="adb778533881b3fe7da695bf838a378533168e058e338150489e1918f2517468" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="5fb33ec7924593b29059a25010b1f4b66c0cf31ee06bec78c4d5fcbd9f74f46d" name="gcc-info" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="57a3be126122b5c5991320ea00c2e42061062c9715cb41f49f09ef44debeebac" name="gcc-info" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="8ab200842a424737ebdbb3eadbdda2f32ce29b2d46f6788fda27d7bd7b04f7af" name="gcc-info" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="42c44d011f98c0fd6a4958cafed167c1a4580581ca783294b5898b2920047747" name="gcc-info" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="431e307178132da02a5590d7a40226273424eecd766235cdd74269fdea575524" name="gcc-locale" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="0822c0b5a9b8c3e27dc6c4de385bbae60c801e8a88b7a11fd757eeaed6a9be15" name="gcc-locale" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="c05549c0f5d41ece6edd8cb190a2fd4326e6bac43f6bc70ff3c998f0355a79f3" name="gcc-locale" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="e82b324738a255eadd5499e85da3556cf1aaff17cab1a248267a054e51495920" name="gcc-locale" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="466d467d98ce794efb1a301fed618c848adace77904520aa1ade40e22a792954" name="gcc-obj-c++" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="b3011acaff5189c03a060e4f0906db42816f7429836f37aea07da9f4b495a94f" name="gcc-obj-c++" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="df6690b3d2de88353c7a4f285ed23cda02947b9577327797e7e2de4eb410f02d" name="gcc-obj-c++" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="4f3b192d97f125361f85508b0bb7ea4bcbbe170243c77fad42a97c0abd8159be" name="gcc-obj-c++" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="141f09f554847ebbc1132096225c1176c7c853c997cc93dbeacb6246e513c781" name="gcc-objc-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="08b5e417d5e5d342f48e9894082f723e2c95055265348e3debbfd065524b4666" name="gcc-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="eca4869db447dc9250b08daa87a4591877f4d1a7eea31389115babb21acf5ee8" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="883f70e20b2674d3e66f8e6beab34dc777dcd44aeaaf6ed5f04773c939de15e9" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="d6784a0e8884721fd3b8d9ebb8a13b1bff51fe0c735fd0813f2edd4c21163be7" name="gcc-objc" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="88e29b787244ab598f1e076f103b98b4cc04979dd1565316fcba5e5bfdd7cb5a" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="meissner@suse.com" date="1423051200">- add a gcc-PIE subpackage, which enables building PIE binaries
  by default using the defaults.spec file. bsc#912298</changelog>
  <changelog author="rguenther@suse.com" date="1424865600">- Add gcc-ada-32bit and gcc-ada-64bit packages.</changelog>
  <changelog author="schwab@suse.de" date="1425297600">- Add gcc-ada-32bit and gcc-ada-64bit packages only if building Ada</changelog>
  <changelog author="rguenther@suse.com" date="1429531200">- Switch gcc to default 5.
- Add gcc-go{,-32bit,-64bit} packages.</changelog>
  <changelog author="rguenther@suse.com" date="1431086400">- Adjust for GCC 5 package renames.</changelog>
  <changelog author="rguenther@suse.com" date="1432036800">- Fix bogus requires to gcc5-c++-{32,64}bit.</changelog>
  <changelog author="rguenther@suse.com" date="1432209600">- Properly query gcc-%gcc_suffix for paths.</changelog>
  <changelog author="rguenther@suse.com" date="1460635200">- Enable Ada for ppc64le and aarch64.</changelog>
  <changelog author="rguenther@suse.com" date="1461758400">- Switch gcc to default 6.</changelog>
  <changelog author="rguenther@suse.com" date="1471521600">- Add gcc-devel package.</changelog>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="486e1301e7bdc13981df2642d6a434efa1a94ea76de2abc4a2e3b23e6749bc5d" name="gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c2e4f3f5b1cbd83d0ea174489ec0ec942646bd847531b6f842339182af3f6c38" name="gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0f1b766eab27f64c9a4a4f45dca7648997383c5758ffcd6a17571aca986ae908" name="gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c0a365dee771a6304735fe70c859f919fe2eed315b91648aaab626eb190f14d" name="gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="24e4056c1eaa7077fd6796925b2fbbffa0c68426f7ad114a24db7952b3764fbd" name="gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cff99fe15513011ae142cab6fe1799588bd51c9f0851cfe27fbb4686e2a402a4" name="gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4e1d8a70b0405fedf30ae8dcb6fcc45adc02709aeb1925c2d2ada1b19b9452b2" name="gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="35ba526d754568f2eb9d3163817a4a1098ea3db2f70c25ed9d5af1f78ca7bc07" name="gcc10-ada" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3c64ac4d7462ee71ff43082f29936dcec39ab3dc9c683a61669fc8289af7af20" name="gcc10-ada" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e2c0e86c8439500d64da37a12d572d283f69b5592366a2aad102a9bee1dc284f" name="gcc10-ada" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="be5d332ae025bb1b94a65683b53f10b51951bafb5c17f5e0024d02c0e8d9e39f" name="gcc10-ada" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c597f72375652799db418c101abebf35adc808593aa50c9984345de2a9e34e9" name="gcc10-ada-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6c04c2dc5508e30df765637de13f3c272a1020c9cb051a921683105d59ef8100" name="gcc10-ada-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f80326a8e8d42a79ffebd210115d9f98fe0d7187e5ec091115eb64228cdf305c" name="gcc10-c++" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f12f91b2e4754c4a4069638ffe12471f9fb2de1445e8ac591c96384ce3169b11" name="gcc10-c++" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="657283efa4a05e344af9c4036862c9d28dda9f7266190ac6b3e8b77144a87356" name="gcc10-c++" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c76bdbb1717851f0939cbfa8508e4b2dbf4054646dfcc2e2b27350a8897991ec" name="gcc10-c++" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c33a594a9a116b0407ad13a7663503f089a85030b29ba2cb05d3643de1f9b9b7" name="gcc10-c++-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e42e59f5212c4b9346bb6b79011de0a3f1ee2632772f9e948cb8ec605b6fa290" name="gcc10-c++-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f9c7617e5753393a415a313db4551fed41316872e727efdc8cef0a14bf214b3f" name="gcc10-d" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0e7b249e063a0763940fe120fd02e2e1bc9520b9d502522c4ed6b0526174f9c3" name="gcc10-d" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="15901668b5c1b4436f394328b919504c5e17893ab49d9ef48506f0de18b3392f" name="gcc10-d" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c8fa94cc9a58d7fb851e977b9386b37374cef3b5988859a076ccfe45c947874" name="gcc10-d-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ea3f33e1e0fa1bbace28943b7e25c409cfe649a66e942b987ed785a1fd43c233" name="gcc10-d-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1319b8739e41f40d006a6185ffccaaffce75321e45ae8977e6340206925b3b2d" name="gcc10-fortran" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b6d13327f6d2cabbea1219919c977ee1b21925d913bc5144fb52334daa883643" name="gcc10-fortran" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="15948baac57504ef4ed0b15fe77e9e0b2e938f73ce3228e63e1d235cd20f04a3" name="gcc10-fortran" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4f32e7cb55406cc91336f697343bae4e593b92bcf03894bcea0086585f993712" name="gcc10-fortran" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0403d13a1de3858063cb36253378b00bb20b79694dad0c3bfff34bdf1f9aef08" name="gcc10-fortran-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a6359da7a009544cb863f51689837f887220a7438d248af1a0e1cb91a13b2cb8" name="gcc10-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9ccc4036a4fdb7b9f7953a11bb957cde51e12888086256b9d90df711dd67f2ed" name="gcc10-go" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="684100c63d6cebfcfb4dff8a5691b890bff5bb631a915a972f8c45118e57c064" name="gcc10-go" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7fcf4e04f5ec573faaceaf11d17627879a6d3222ba5e8abade29bd486f451a1e" name="gcc10-go" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6443807d22d8d6fa0ca97b199154c872794a285f30737408be30f89666ff4812" name="gcc10-go" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="58d2013bf5b77ecb1d5d7edb0c56b892a793ee121eabdbfc859c5b2d16d3fbd3" name="gcc10-go-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6f9f7e7f6e8fda5e35de60873d6ea9042a49ff8886f5d8614a84991c3bdb343c" name="gcc10-go-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8c7e29584d29c4278fdd5d565902e077da12faea028db02fce43e8012af4e5d0" name="gcc10-info" arch="noarch">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="02970939bbfa645d473a80c57c1414bbf43a6d23955a4b3f0d3a82b49c237576" name="gcc10-locale" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0498e335bcec76a1c89ce6326a91f60ae4c6030ce8db14f7056acbcd67ea437d" name="gcc10-locale" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="90fa54b5896df925ee3a2e5783e3b7735db29e0c1376e163201ff832f5b5da8c" name="gcc10-locale" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c2332331344a29060b7bf72ee08c2704704df0648e0516e80a37b2044c82bb5" name="gcc10-locale" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ca00b07847d044da9c4fe63a3884cfa290f2e26f53482d280f341c0132ef6e46" name="gcc10-obj-c++" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fa1a72e6650311783a50fcb9e48d99039442649987a5008e47479bf7add7d028" name="gcc10-obj-c++" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e7429e0f344f1cdcf1f8846a202155880e42d15d04a533df65a905c9276d0fce" name="gcc10-obj-c++" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="883dcffdce8461cfbe471ae96eba43db0ca5e59ebef45e44a38f77d1ee2ff52c" name="gcc10-obj-c++" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bb14c0943a394cb0f417a31f8e936f15f40954044cddda76b1c0d1c6cf302d40" name="gcc10-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="38b56755ff1325ad3ea3d47de0586d132215a3d1c92c49ad7a134ae082e16bde" name="gcc10-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="30ae395b121eba08d59fa948131c80faec88be26567d4c125dfc13867f608fa3" name="gcc10-objc" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="78563ead062133a484798674fd041b0e052001e6e282c9fefdc4650625e6cacc" name="gcc10-objc" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2e3b83935f9ca9c75f7b4de1897db2d1f0eae867a5c19ce9c546ed704f123f87" name="gcc10-objc" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="45341985fa19a90808a78406d0d93eae2351d37d197188d86587c4d83c977ddb" name="gcc10-objc" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0a200dd391c47885f6c701b7cabdff709f4424753e1d7570cbd07e7d2eca119e" name="gcc10-objc-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="88029da9d3d229e3a9de70e017fc2deca4d0715f5fe9294cae44749cb769aa70" name="gcc10-objc-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7d4c56cdf650c2a5d437294014d6119dd320f776996c19960402874cd8a4d7f5" name="gcc10-testresults" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bccb90a53c546e3a037e74ed8baed5953456afe32ffdb46bedf50578f1e0fe56" name="gcc10-testresults" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f831467266ff071211f1bb03052487a99cd436194a5454869da627d2074b4037" name="gcc10-testresults" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4573c33b1167502e608d71da941baabf9318d355486068e057b6b7b8d380ef64" name="gcc10-testresults" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cb5ba9154832310f48f8ec2d5ae4fead6faa8e69f22387ef9854a2fe6a0fcd68" name="gcc10-testresults" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="92132b83b46cf1d4a289604da701bc1c48b9b75ce42d4c26f11db1e8d3a65a40" name="gfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="15c811a2bd7ec9609810d79015b4d7c125a865727a9badf39eccb3dc0e6110fd" name="gfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="ff0c8d9d3c3ec649a12d7f84fb1834c9065cedd8cd33de2bc80db495f89b0db7" name="gfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="90c569fc708083d7960684b16e30215000aa2dea0b2a9a6f1fa07db1b19cba4c" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="a938fc7157f124ccc19b5051a1a298aa648d11a70c999adaa5da13b693a50302" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c37f2b7c536d852baf7098799169a400f4831db7e49a278738bfbcca92582b96" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="8bfdef33886e9b3cf6f509c40cf9846e70365bd2daddde14c56d62154316d8b8" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d08a0fe3d4cdb5c888dfe94618fd6849452cb372e43337ca2f7abbfc919ccce0" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="690246c0142f904f345b5402f061489deec6cc0797127fe541b9e77684333d17" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="615252e15a0c1a4fc769a06b5a4b86e5b4a534a34a81ccdd0910308cf3805ed1" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="383777fb02f1f93f8a117edc85410f24ce2d8115d18a0244ecfab9b7e6d765a8" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="ba6d04c54c1df8904987d6cb51f56b1f1796704b9b491ea732ddf421b0d695aa" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="627ed4e8a34d857bcc0500356483267daf33341121cc172fc6a832e518df3d77" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="310b9de840006f83d230be338d01f54e7b6d0d6c30fc466e75718b6fa2e1f832" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="885dcbfb82ea72cac5a52ee380c0bae606da59c028b9d067b8f38786ad367d13" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="470530f5e572c01b3d5626cd0bdb10e60bcba918f8e0022359c7e862d28a446a" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="06aeb60c6f566d49e73e17f5e95eb663a07ee12eafde5635551440748f8c0597" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="7f79db1ba2f68fe2d4efdeb61f228bc2f4effc565ae1f1172dcb8e33a88f3fbd" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="b5d573d01e8f5cd649d003079c2deccff7fbf966679d658657619770cf179bc4" name="gfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="a465a3f20d1662368e5453ea566fb33d1f29a1110b5724ab8350e5a17dd42d98" name="gfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c693f8fa8ed3f7e8ab0b913976f07322bd6be384a222f87c3c11ff13926e7d38" name="gfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="af083855c047918ddf0f9e97cd1d6fbb5633f7a8eb15431dc5564f62aab8da19" name="gfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="52cd5254490f98a64809da09f63058759e2d7bd21cac313bcd6b39518689b0cc" name="gfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="a7dd0e4018b559ca38d2efd6a075ea1356fd24596b2a198a204b9846b8ad7a46" name="gfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="24e0f7e526cce1cf526257a98a1b24027db146bff59a2a77c514501d549c2b5c" name="glade-catalog-evolution" arch="aarch64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="f4d0b1c025046aa1aa80f5fbd6e18f8849dba511d8561b647ae48e3916deb1d9" name="glade-catalog-evolution" arch="ppc64le">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="6a4d48b489d36fd10d72f68fbd55d46c6df177a2481e24b9fd436c262eb4f2f8" name="glade-catalog-evolution" arch="s390x">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="ae883d4f89d58caf064a666428d4462d28fecc49b6c08e89877274a1c026b359" name="glade-catalog-evolution" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1546862400">- Update to version 3.30.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bugs fixed: glgo#GNOME/evolution#273.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#282,
    glgo#GNOME/evolution#283, glgo#GNOME/evolution#284,
    glgo#GNOME/evolution#288.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + [EWebView] Use case insensitive search when highlighting words
    in the body.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + e_mail_formatter_format_address: Quote name part when it
    contains special letters.
  + [SRV config lookup] Preset authentication method for SMTP.
  + [itip-view] Do not duplicate X-MICROSOFT-CDO-REPLYTIME in
    replies.
  + [Flatpak] Update manifests to reflect recent
    evolution-data-server changes.
  + [Flatpak manifests] Build geocode-glib directly with meson.
  + help: Make clearer that SSL is dead and TLS is its successor.
  + Bugs fixed: glgo#GNOME/evolution#154, glgo#GNOME/evolution#162,
    glgo#GNOME/evolution#165, glgo#GNOME/evolution#168,
    glgo#GNOME/evolution#169, glgo#GNOME/evolution#236,
    glgo#GNOME/evolution#237, glgo#GNOME/evolution#238,
    glgo#GNOME/evolution#239, glgo#GNOME/evolution#248,
    glgo#GNOME/evolution#252, glgo#GNOME/evolution#254.
  + Updated translations.
- Changes from version 3.31.2:
  + Free/Busy lookup for authenticated URLs not re-tried.
  + [Calendar] Fix issues with attendees editing of an existing
    meeting.
  + A little code clean-up related to the previous commit.
  + [Event/Task editor] Force timezone part show only if really
    needed.
  + [Flatpak] Update some of the dependencies.
  + Make sure intltool-merge cache is created only once.
  + Correct evolution-mail-formatter user documentation build
    warning.
  + Include also environment LD_LIBRARY_PATH in gtk-doc-scangobj
    call.
  + Bugs fixed: bgo#228772, bgo#561799, bgo#610741, bgo#652821,
    bgo#741363, bgo#769396, bgo#781122, bgo#795202,
    glgo#GNOME/evolution#113, glgo#GNOME/evolution#120
    (boo#1125230 CVE-2018-15587), glgo#GNOME/evolution#140,
    glgo#GNOME/evolution#163, glgo#GNOME/evolution#164,
    glgo#GNOME/evolution#166, glgo#GNOME/evolution#176,
    glgo#GNOME/evolution#180, glgo#GNOME/evolution#181,
    glgo#GNOME/evolution#182, glgo#GNOME/evolution#183,
    glgo#GNOME/evolution#187, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#196, glgo#GNOME/evolution#198,
    glgo#GNOME/evolution#208, glgo#GNOME/evolution#211,
    glgo#GNOME/evolution#214.
  + Updated translations.
- Changes from version 3.31.1:
  + Update Flatpak build scripts to better integrate with the host
    desktop.
  + Add a man page for evolution.
  + [mail-send-receive] Try harder when searching for mail shell
    view.
  + Improve Flatpak manifests.
  + Composer autosave can stop working.
  + GNOME Bugzilla has been replaced by GNOME Gitlab.
  + [ECollectionAccountWizard] Preset user name to mail sources.
  + [EMVFolderEditor] Correct path used to e_restore_window().
  + Updated Czech default mail translation.
  + Fixed links in default mail.
  + Print actions disabled in Calendar view.
  + Task Location shown as Summary in preview pane.
  + Make sure message_list_folder_changed() is called from the
    main/UI thread.
  + [Flatpak] Use host system DConf to store user settings.
  + Bugs fixed: bgo#548656, bgo#640994, bgo#724129, bgo#750636,
    bgo#785719, glgo#GNOME/evolution#66, glgo#GNOME/evolution#84,
    glgo#GNOME/evolution#86, glgo#GNOME/evolution#101,
    glgo#GNOME/evolution#103, glgo#GNOME/evolution#104,
    glgo#GNOME/evolution#106, glgo#GNOME/evolution#107,
    glgo#GNOME/evolution#108, glgo#GNOME/evolution#110,
    glgo#GNOME/evolution#111, glgo#GNOME/evolution#115,
    glgo#GNOME/evolution#118, glgo#GNOME/evolution#119,
    glgo#GNOME/evolution#122, glgo#GNOME/evolution#123,
    glgo#GNOME/evolution#127, glgo#GNOME/evolution#128,
    glgo#GNOME/evolution#129, glgo#GNOME/evolution#135,
    glgo#GNOME/evolution#136, glgo#GNOME/evolution#139,
    glgo#GNOME/evolution#140, glgo#GNOME/evolution#155,
    glgo#GNOME/evolution#156, glgo#GNOME/evolution#159,
    glgo#GNOME/evolution#162.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Clamp GSettings values before restoring window size.
  + "Save Image..." fails on shown attached image in message
    preview.
  + Bump copyright year - the future is now!.
  + Help: Mention the existence of mnemonics / accelerators.
  + Bugs fixed: glgo#GNOME/evolution#273.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Change parentheses in an if() to avoid clang warning.
  + [em-format] Unfold Mailer header value before using it.
  + Bugs fixed: glgo#GNOME/evolution#302, glgo#GNOME/evolution#306,
    glgo#GNOME/evolution#307.
  + Updated translations.
- Changes from version 3.31.90:
  + Event with empty summary can cause crash.
  + [Composer] Draft email can lose attachments when opened.
  + Initialize 'cache' variable in e_http_request_process_sync().
  + Help:
  - Backspace works similar to Space across folders.
  - Mention 'Show Junk Messages' option.
  - Loading remote images: Match the string in the UI.
  + Bugs fixed: glgo#GNOME/evolution#76, glgo#GNOME/evolution#250,
    glgo#GNOME/evolution#275, glgo#GNOME/evolution#277,
    glgo#GNOME/evolution#278, glgo#GNOME/evolution#279,
    glgo#GNOME/evolution#282, glgo#GNOME/evolution#283,
    glgo#GNOME/evolution#284, glgo#GNOME/evolution#288,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#297.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 3.31.92:
  + The 'Show' combo box hidden for small screens in the search
    bar.
  + Ref/unref imbalance on a CamelFolder instance.
  + Change how label actions are updated in EMailReader.
  + Use GWeakRef when watching D-Bus bus names.
  + [EWebKitEditor] Fix few memory leaks.
  + Initialize all members of 'struct tm' in e_cert_populate().
  + Fix few memory leaks around mail print.
  + Colorize insecure parts as 'bad' in otherwise secure mail.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + help:
  - Fix wrong docs about email thread collapsing by default.
  - Cover saving and applying Custom Views for mail folders.
  - Replace git.gnome.org by gitlab.gnome.org.
  + Bugs fixed: bgo#791044, glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution#289, glgo#GNOME/evolution#313,
    glgo#GNOME/evolution#318, glgo#GNOME/evolution#324.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + help:
  - Update cs screenshot of mail switcher.
  - Remove ancient outdated Spanish screenshot.
  - Set an image to non-executable mode.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Update flatpak 'master' version manifest.
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.bgo
  + Fix some maybe uninitialized variable usages.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Fix two memory leaks.
  + help:
  - Cover customizing keyboard shortcuts.
  - A custom Archive mail folder requires to first set a general
    one.
  - New mail notification in mail icon is not a star anymore.
  - Update application icon for 3.32.
  + Bugs fixed: glgo#GNOME/evolution#190, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#325, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#336, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#378,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#395.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + [Flatpak]
  - Cover changes in 'gdbus wait' timeout argument units.
  - Change how already running services are detected in the
    wrapper script.
  - Give access to filesystem's ~/.gnupg.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560772800">- Update to version 3.32.3:
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Bugs fixed: glgo#GNOME/evolution#400, glgo#GNOME/evolution#405,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#437, glgo#GNOME/evolution#439,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#454, glgo#GNOME/evolution#472,
    glgo#GNOME/evolution#474, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution!13, glgo#GNOME/evolution!14,
    glgo#GNOME/evolution!16, glgo#GNOME/evolution#112.
  + Updated translations.
- Use modern cmake_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563192000">- Update to version 3.32.4:
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Test whether referenced column exists when loading ETableState.
  + Bugs fixed: bgo#755730, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#501,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563796800">- Split text highlight plugin into a subpackage.
- Add missing runtime dependency on the 'highlight' package.
- Replace packageand() by boolean dependencies.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.
- Update to version 3.33.91
  + Include also CFLAGS in gtkdoc-scangobj command line.
  + Fix few memory leaks in internal test programs.
  + ECellTree: Limit deep threads indent up to 70% of the cell
    width.
  + EDayView: Time zone name not always updated on time zone change
    in UI.
  + Bug Fixes: glgo#GNOME/evolution#518, glgo#GNOME/evolution#541,
    glgo#GNOME/evolution#554, glgo#GNOME/evolution#563,
    glgo#GNOME/evolution#568, glgo#GNOME/evolution#576.
- Update to version 3.33.90
  + Add refresh interval settings for CardDAV address books.
  + killev: Search for killall/pkill in runtime, rather than in
    compile time.
  + Use Unicode triple-dots in translatable strings.
  + help: Replace an external redirect link by its direct link.
  + help: Fix xmlns for XInclude (must be http) so pages validate.
  + help: Cover formatting of received HTML mail, e.g. showing
    Plain Text.
  + Bug Fixes: glgo#GNOME/evolution#549, glgo#GNOME/evolution#564.
- Update to version 3.33.4
  + Use GtkPopover for EColorCombo widget.
  + Do not unfold DKIM and ARC headers in message preview.
  + Remember source message information when re-editing in Drafts
    or Outbox.
  + [ECalModel] Cache value for E_CAL_MODEL_FIELD_ICON.
  + Inconsistent background color in ETable for Memos, Tasks and
    List View.
  + Incorrect timezone selected in ETimezoneDialog.
  + Remove useless runtime check in date_time_list_finalize().
  + Correct coding typo in e_day_view_on_editing_stopped().
  + Refer to 'Evolution Website' only as 'Website' in the About
    dialog.
  + [ECompEditor] Ensure attendee changes stored before save.
  + Check whether enum-based ICalParameter had been created before
    using it.
  + Test whether referenced column exists when loading ETableState.
  + Search for Bogofilter/SpamAssassin binaries during configure
    time.
  + [addressbook] Claim what image size is expected when asking to
    resize given image.
  + help: Update main window screenshot for 3.32 style.
  + Bug Fixes: bgo#755730, bgo#759493, glgo#GNOME/evolution#533,
    glgo#GNOME/evolution#385, glgo#GNOME/evolution#479,
    glgo#GNOME/evolution#487, glgo#GNOME/evolution#492,
    glgo#GNOME/evolution#494, glgo#GNOME/evolution#499,
    glgo#GNOME/evolution#501, glgo#GNOME/evolution#503,
    glgo#GNOME/evolution#504, glgo#GNOME/evolution#506,
    glgo#GNOME/evolution#507, glgo#GNOME/evolution#508,
    glgo#GNOME/evolution#517, glgo#GNOME/evolution#519,
    glgo#GNOME/evolution#529, glgo#GNOME/evolution#534.
- Update to version 3.33.3
  + Fix a crash in itip-view.c:extract_itip_data().
  + Fix clang warnings (mostly [-Wenum-conversion]).
  + Add all icon directories into icon theme search path in
    maintainer mode.
  + Local calendar config option to open for writing does nothing.
  + Change path where backup/restore searches for the .running
    file.
  + Fix several memory leaks in the addressbook code.
  + Memos cannot have set reminders according to RFC 5545.
  + Use ECalComponentAlarm members instead of ICalProperty objects.
  + Add 'Status' column to Memos and Calendar's List View.
  + Bug Fixes:
    bgo#233065, bgo#793795,glgo#GNOME/evolution#399,
    glgo#GNOME/evolution#408, glgo#GNOME/evolution#433,
    glgo#GNOME/evolution#481, glgo#GNOME/evolution#484,
    glgo#GNOME/evolution#445, glgo#GNOME/evolution#446,
    glgo#GNOME/evolution#448, glgo#GNOME/evolution#454,
    glgo#GNOME/evolution#463, glgo#GNOME/evolution#468,
    glgo#GNOME/evolution#472, glgo#GNOME/evolution#474,
    glgo#GNOME/evolution#475, glgo#GNOME/evolution#476,
    glgo#GNOME/evolution#478, glgo#GNOME/evolution#479.
- Update to version 3.33.2
  + Fixed typo in string.
  + Prevent crash in cal_data_model_notify_recurrences_cb().
  + Correct code typo in test-keyfile-settings-backend.c.
  + Fix a possible memory leak in
    e-web-view.c:web_view_initialize().
  + Reference a GDBusProxy object in the synchronous call wrappers.
  + Fix a crash when filling mail threaded view.
  + Port to libecal-2.0 and adapt to libebook API changes.
  + Address some issues reported by static analyzers..
  + Correct type of ECalDataModel::timezone property.
  + Miscellaneous changes for issues overlooked during port to
    libical-glib.
  + Bug Fixes: glgo#GNOME/evolution#240, glgo#GNOME/evolution#400,
    glgo#GNOME/evolution#405, glgo#GNOME/evolution#406,
    glgo#GNOME/evolution#407, glgo#GNOME/evolution#417,
    glgo#GNOME/evolution#429, glgo#GNOME/evolution#430,
    glgo#GNOME/evolution#432, glgo#GNOME/evolution#437,
    glgo#GNOME/evolution#439, glgo#GNOME/evolution#112.
- Update to version 3.33.1
  + Expand/collapse buttons in vCard preview do nothing.
  + Fix few memory leaks around vCard preview and mail attachment
    parsing.
  + Fix some maybe uninitialized variable usages.
  + Inline Forward headers bold in Plain Text mode.
  + Fix a copy&amp;paste error with LC_TIME in emcu_change_locale().
  + [CompEditor] Use CSS3 color name in the iCalendar COLOR
    property.
  + Update flatpak README.
  + Add a link to an online build manual into the README.
  + Fix two memory leaks.
  + Use lower-case "mailto:" consistently in the code.
  + [mail-notification] Use sound theme by default.
  + help: Cover customizing keyboard shortcuts.
  + help: A custom Archive mail folder requires to first set a
    general one.
  + help: New mail notification in mail icon is not a star anymore.
  + help: Update screenshots of mail switcher to 3.32 style.
  + help: Update application icon for 3.32.
  + Bug Fixes: bg0#202257, bgo#203955, glgo#GNOME/evolution#190,
    glgo#GNOME/evolution#210, glgo#GNOME/evolution#256,
    glgo#GNOME/evolution#395, glgo#GNOME/evolution#286,
    glgo#GNOME/evolution#323, glgo#GNOME/evolution#325,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution#327,
    glgo#GNOME/evolution#330, glgo#GNOME/evolution#336,
    glgo#GNOME/evolution#338, glgo#GNOME/evolution#339,
    glgo#GNOME/evolution#343, glgo#GNOME/evolution#344,
    glgo#GNOME/evolution#348, glgo#GNOME/evolution#359,
    glgo#GNOME/evolution#370, glgo#GNOME/evolution#373,
    glgo#GNOME/evolution#376, glgo#GNOME/evolution#377,
    glgo#GNOME/evolution#378, glgo#GNOME/evolution#380,
    glgo#GNOME/evolution#383, glgo#GNOME/evolution#384,
    glgo#GNOME/evolution#386, glgo#GNOME/evolution#390,
    glgo#GNOME/evolution#392, glgo#GNOME/evolution#94,
    glgo#GNOME/evolution#99, glgo#GNOME/evolution#102.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + itip-formatter: Doesn't match attendee when an alias address is
    used.
  + ECompEditor: Set window's urgency hint after error when not
    focused.
  + Bug Fixes: glgo#GNOME/evolution#528, glgo#GNOME/evolution#551,
    glgo#GNOME/evolution#562, glgo#GNOME/evolution#574,
    glgo#GNOME/evolution#578, glgo#GNOME/evolution#583,
    glgo#GNOME/evolution#588, glgo#GNOME/evolution#592,
    glgo#GNOME/evolution#593, glgo#GNOME/evolution#601.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + help: Fix broken markup in cs help translation.
  + help: Remove XInclude for Account settings' \"Identity\"
    section.
  + help: Cover server-side search behavior for remote accounts.
  + help: Remove unproven statement about search speed.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 3.34.1:
  + EWebView: Pile calls to Web Extension proxy only when such
    exists.
  + Fix several memory leaks in ECalModel and its descendants.
  + help:
  - Update application logo.
  - Fix a typo (semi-colon instead of colon).
  + Bugs fixed: glgo#GNOME/evolution#524, glgo#GNOME/evolution#587,
    glgo#GNOME/evolution#603, glgo#GNOME/evolution#610,
    glgo#GNOME/evolution#611, glgo#GNOME/evolution#615,
    glgo#GNOME/evolution#617, glgo#GNOME/evolution#623,
    glgo#GNOME/evolution#624, glgo#GNOME/evolution#636,
    glgo#GNOME/evolution#641, glgo#GNOME/evolution#644,
    glgo#GNOME/evolution#645.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574424000">- Update to version 3.34.2:
  + Fix a crash when changing Archive folder.
  + Calendar: Show only the last part of the timezone above the
    time column in the Day View.
  + ESimpleAsyncResult: Avoid thread scheduling race when finishing
    on idle.
  + Bugs fixed: glgo#GNOME/evolution#659, glgo#GNOME/evolution#680,
    glgo#GNOME/evolution#681, glgo#GNOME/evolution#696,
    glgo#GNOME/evolution#701, glgo#GNOME/evolution#702,
    glgo#GNOME/evolution#709, glgo#GNOME/evolution#711.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed:
  - glgo#GNOME/evolution#681 Cannot type the date of a meeting.
  - glgo#GNOME/evolution#719 e-cal-dialogs: Set default responses
    for dialogs.
  - glgo#GNOME/evolution#729 New Mail account wizard ignores
    email address change.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581681600">- Update to version 3.34.4:
  + Emoticon: Replace Unicode variant for face-smile and face-sad
    with Emoji.
  + Bugs fixed:
  - 'open-map:' URI passed to browser.
  - PST importer: Fix name of MIME multipart/alternative.
  - Incorrect time shown in Reply credits for Australia/Adelaide.
  - ECompEditor: Typing end time messes up start time.</changelog>
  <changelog author="mgorse@suse.com" date="1624017600">- Add evolution-disable-sandboxing-to-enable-printing.patch:
  disable WebKit sandboxing. Needed for printing to work until
  webkit#202363 is fixed (boo#1174907).</changelog>
</package>
<package pkgid="181d2453158b6c6c604d1ce3185b5b0df5da57eb07824332b7b8b30768947ffa" name="gnome-bluetooth" arch="aarch64">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="417f521bcdec01f5a2104789f49b42207cd1b56b08a2f2cd4198e4fc899f6784" name="gnome-bluetooth" arch="ppc64le">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="a21345be16346e7c0c7afd6b00392028bed93f2624d1ae56f7e4f2a431b404a9" name="gnome-bluetooth" arch="s390x">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="8d9bfb9788651fd6d5296f75731c4208ca38dc5253c2b9a1a3c7625649eb4b83" name="gnome-bluetooth" arch="src">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="9a0bc47f41a5586827981c6aec83b7f594d6579bfb3e17a8ff766670c981893f" name="gnome-bluetooth" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="0283e7b3e1a0d556886ced75fcfcdc41f2ea5e222061e2785c15a8bff60f820c" name="gnome-bluetooth-devel" arch="aarch64">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="11385c99a347a6b24fe3d6d1a5e73884a864da1195ab15bcd3db63b919a99adf" name="gnome-bluetooth-devel" arch="ppc64le">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="59fcaacfd77c5d10eb25ddecd6ab765f121d0ee89d0bc00f944095f3aede3181" name="gnome-bluetooth-devel" arch="s390x">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="9250ef4c1d5bec77cd247e63a7c477e4c3ee61e6247442078d8c58579bb39d92" name="gnome-bluetooth-devel" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="43d3811f0500a80dffe7730f538598f8a21d6f28e2b2f275e62bbf8c9f5dac65" name="gnome-bluetooth-lang" arch="noarch">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="8aa4b3e8712743515da8ed4a9bae6a8d2bf783e220533210b7ff483a8b891ca6" name="gnuplot" arch="aarch64">
  <version epoch="0" ver="5.2.2" rel="3.9.2"/>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="werner@suse.de" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as position independent executable (bsc#1184123).
  * Added gnuplot-PIE.patch</changelog>
</package>
<package pkgid="c3db456795e02d7b0f89e041b4048f2a270e3a01b25a10bb0a81bd5ee8ced4d1" name="gnuplot" arch="ppc64le">
  <version epoch="0" ver="5.2.2" rel="3.9.2"/>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="werner@suse.de" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as position independent executable (bsc#1184123).
  * Added gnuplot-PIE.patch</changelog>
</package>
<package pkgid="c49808623359950e25ed2828952caebb14b6e5acf705baadbb76e04421139ab4" name="gnuplot" arch="s390x">
  <version epoch="0" ver="5.2.2" rel="3.9.2"/>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="werner@suse.de" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as position independent executable (bsc#1184123).
  * Added gnuplot-PIE.patch</changelog>
</package>
<package pkgid="07c14be514b8b7af1399471166cba76df59d1285dcac1cde0c88ae3a1da0bcfe" name="gnuplot" arch="src">
  <version epoch="0" ver="5.2.2" rel="3.9.2"/>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="werner@suse.de" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as position independent executable (bsc#1184123).
  * Added gnuplot-PIE.patch</changelog>
</package>
<package pkgid="29aca998d1565538ea583c6147ab9b18b29b39fa2169d96e42643adb523349dd" name="gnuplot" arch="x86_64">
  <version epoch="0" ver="5.2.2" rel="3.9.2"/>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="werner@suse.de" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as position independent executable (bsc#1184123).
  * Added gnuplot-PIE.patch</changelog>
</package>
<package pkgid="a6253e8ba3d1a0dcf34954e93aa365071c7a7268c423e24bf647df620ebda912" name="gnuplot-doc" arch="noarch">
  <version epoch="0" ver="5.2.2" rel="3.9.2"/>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="werner@suse.de" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as position independent executable (bsc#1184123).
  * Added gnuplot-PIE.patch</changelog>
</package>
<package pkgid="94b24cdeeef1c170ce96d5a5412b2d2b0d3517dabb1bb1ddcb3657c3d98817eb" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="c5ac1ca2cc1a78461ad268c834d89f61f8004f24496961757142deca4b5980c8" name="gnutls" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="3293e0ca5beda3e054557c4994908c0305c5161e3a6707d8b0a079c9e3d5c890" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="3ddbc584fc21a266c3b5627e94dac1ad189a8717fc3e19446d3f107d56d0aff6" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="846404ca2b3ba6dcb04b15effb795bcad9c1020f019b3ce3bae2dfca4607ffa0" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="ec147af396bcff376fcbc788e8dfe6171599ca3030e43b1f3d12302a6283e207" name="gnutls-guile" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="a7fef72fcacd9740e2e7a4cc9a700349d576b78f45da133a77e6ea01619d1b46" name="gnutls-guile" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="a8eac716765cc7708cd573a783400a153358899ffa101711765480d89dbd0d67" name="gnutls-guile" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="d838e1dd2bce8a44aeba1ded00d37ff5a1443e3de58357ab953879f37ce484f2" name="gnutls-guile" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="43eb05aa1c471152516ac1535079a19228ccea296f1e82c6b48416698c588e01" name="go1.15" arch="aarch64">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="d477e07442ae5cc5c2cadfd4f27e0e8b22df95f08e3c313d1ca7de64734d6ac0" name="go1.15" arch="ppc64le">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="2fb29367967b71dab2ed7814baa2eccf0e7aa602e49a38603ac2aa5896b24437" name="go1.15" arch="s390x">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="c92803e65c77ec978257ab8e2ac22384290ab41dfa74c8750021e7efca34617f" name="go1.15" arch="src">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="7f4aba99e05d1488bf301ec3f5c650ec678febaacbc53bb1dc52730bff557790" name="go1.15" arch="x86_64">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="cb074baaff9bd6ac1d7fdedf76e0c58014e685582ecd43a34e91536defbe1f6c" name="go1.15-doc" arch="aarch64">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="b5b25d10e030dc75be0345adbb9fb52a97ddd3d26cf08d73d984f1a9edb5e511" name="go1.15-doc" arch="ppc64le">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="102a35f75c43b33f771a4b95036553836cf49fe8d17deaec2d1d5c3a4824b7fc" name="go1.15-doc" arch="s390x">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="1716663e28a5a239b27fb317937a69847400f2d94d2a1aa1255759415c267a51" name="go1.15-doc" arch="x86_64">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="cb4340d12d14fec3b763d6efe0c511cdc0fdc46dfa52090c6fe31e2df2317ec1" name="go1.15-race" arch="aarch64">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="02a1f9deed619206354a880156d87a8afb3c85767f096c666b6c15c2c65dd152" name="go1.15-race" arch="x86_64">
  <version epoch="0" ver="1.15.13" rel="1.33.1"/>
  <changelog author="jkowalczyk@suse.com" date="1591963200">- go1.15beta1 (released 2020-06-11) is a beta version of go1.15 cut
  from the master branch at the revision tagged go1.15beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1595592000">- go1.15rc1 (released 2020-07-24) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1596801600">- go1.15rc2 (released 2020-08-07) is a release candidate of go1.15
  cut from the master branch at the revision tagged go1.15rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1597147200">- go1.15 (released 2020-08-11) Go 1.15 is a major release of Go.
  go1.15.x minor releases will be provided through August 2021.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1175132 go1.15 release tracking
  * See release notes https://golang.org/doc/go1.15. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module support in the go command is ready for production use,
    and we encourage all users to migrate to Go modules for
    dependency management.
  * Module cache: The location of the module cache may now be set
    with the GOMODCACHE environment variable. The default value of
    GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module
    cache before this change.
  * Compiler flag parsing: Various flag parsing issues in go test
    and go vet have been fixed. Notably, flags specified in
    GOFLAGS are handled more consistently, and the -outputdir flag
    now interprets relative paths relative to the working
    directory of the go command (rather than the working directory
    of each individual test).
  * The GOPROXY environment variable now supports skipping proxies
    that return errors. Proxy URLs may now be separated with
    either commas (,) or pipe characters (|). If a proxy URL is
    followed by a comma, the go command will only try the next
    proxy in the list after a 404 or 410 HTTP response. If a proxy
    URL is followed by a pipe character, the go command will try
    the next proxy in the list after any error. Note that the
    default value of GOPROXY remains
    https://proxy.golang.org,direct, which does not fall back to
    direct in case of errors.
  * On a Unix system, if the kill command or kill system call is
    used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go
    program, and if the signal is not being handled via
    os/signal.Notify, the Go program will now reliably crash with
    a stack trace. In earlier releases the behavior was
    unpredictable.
  * Allocation of small objects now performs much better at high
    core counts, and has lower worst-case latency.
  * Go 1.15 reduces typical binary sizes by around 5% compared to
    Go 1.14 by eliminating certain types of GC metadata and more
    aggressively eliminating unused type metadata.
  * The toolchain now mitigates Intel CPU erratum SKX102 on
    GOARCH=amd64 by aligning functions to 32 byte boundaries and
    padding jump instructions. While this padding increases binary
    sizes, this is more than made up for by the binary size
    improvements mentioned above.
  * Go 1.15 adds a -spectre flag to both the compiler and the
    assembler, to allow enabling Spectre mitigations. These should
    almost never be needed and are provided mainly as a "defense
    in depth" mechanism. See the Spectre Go wiki page for details.
  * The compiler now rejects //go: compiler directives that have
    no meaning for the declaration they are applied to with a
    "misplaced compiler directive" error. Such misapplied
    directives were broken before, but were silently ignored by
    the compiler.
  * Substantial improvements to the Go linker, which reduce linker
    resource usage (both time and memory) and improve code
    robustness/maintainability. Linking is 20% faster and requires
    30% less memory on average. These changes are part of a
    multi-release project to modernize the Go linker, meaning that
    there will be additional linker improvements expected in
    future releases.
  * The linker now defaults to internal linking mode for
  - buildmode=pie on linux/amd64 and linux/arm64, so these
    configurations no longer require a C linker.
  * There has been progress in improving the stability and
    performance of the 64-bit RISC-V port on Linux (GOOS=linux,
    GOARCH=riscv64). It also now supports asynchronous preemption.
  * crypto/x509: The deprecated, legacy behavior of treating the
    CommonName field on X.509 certificates as a host name when no
    Subject Alternative Names are present is now disabled by
    default. It can be temporarily re-enabled by adding the value
    x509ignoreCN=0 to the GODEBUG environment variable. Note that
    if the CommonName is an invalid host name, it's always
    ignored, regardless of GODEBUG settings. Invalid names include
    those with any characters other than letters, digits, hyphens
    and underscores, and those with empty labels or trailing dots.
  * crypto/x509: go1.15 applications with an AWS DB instance that
    was created or updated to the rds-ca-2019 certificate prior to
    July 28, 2020, you must update the certificate again. If you
    created your DB instance or updated its certificate after July
    28, 2020, no action is required. For more information, see
    go#39568</changelog>
  <changelog author="jkowalczyk@suse.com" date="1598961600">- go1.15.1 (released 2020-09-01) includes security fixes to the
  net/http/cgi and net/http/fcgi packages.
  CVE-2020-24553
  Refs boo#1175132 go1.15 release tracking
  * boo#1176031 CVE-2020-24553
  * go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified</changelog>
  <changelog author="meissner@suse.com" date="1599220800">- replace binutils-gold requires by recommends for aarch64 on SLE. (bsc#1170826)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1599652800">- go1.15.2 (released 2020-09-09) includes fixes to the compiler,
  runtime, documentation, the go command, and the net/mail, os,
  sync, and testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test
  * go#41178 doc: include fix for #34437 in Go 1.14 release notes
  * go#41034 testing: Cleanup races with Logf and Errorf
  * go#41011 sync: sync.Map keys will never be garbage collected
  * go#40934 runtime: checkptr incorrectly -race flagging when using &amp;^ arithmetic
  * go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic
  * go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64
  * go#40849 testing: "=== PAUSE" lines do not change the test name for the next log line
  * go#40845 runtime: Panic if newstack at runtime.acquireLockRank
  * go#40805 cmd/test2json: tests that panic are marked as passing
  * go#40804 net/mail: change in behavior of ParseAddressList("") in 1.15
  * go#40802 cmd/go: in 1.15: change in "go test" argument parsing
  * go#40798 cmd/compile: inline marker targets not reachable after assembly on arm
  * go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type
  * go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x
  * go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount
  * go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment
- Add missing '?' before 'suse_version' test by Xia Lei &lt;emricg2@gmail.com&gt;</changelog>
  <changelog author="jkowalczyk@suse.com" date="1602763200">- go1.15.3 (released 2020-10-14) includes fixes to cgo, the
  compiler, runtime, the go command, and the bytes, plugin, and
  testing packages.
  Refs boo#1175132 go1.15 release tracking
  * go#41871 cmd/cgo: support other GOARCH values in 1.15
  * go#41797 runtime: memory corruption from stack-allocated defer on 32-bit
  * go#41720 cmd/compile: invalid instruction: MOVL $11553462026240, AX
  * go#41620 memory corruption on linux/386 with float32 arithmetic, GO386=387, buildmode pie/c-archive
  * go#41595 internal/bytealg: SIGILL on s390x [1.15 backport] CherryPickApproved
  * go#41543 cmd/compile: 1.15 heap allocations regression when calling Write on os.Stdout
  * go#41464 cmd/go: breakage with go version command and GOFLAGS environment variable
  * go#41453 cmd/addr2line: TestAddr2Line fails with double / in $GOROOT_FINAL
  * go#41432 cmd/cgo: jmethodID/jfieldID is not mapped to uintptr if building with the Android NDK
  * go#41317 runtime: "fatal error: unexpected signal during runtime execution" on windows-amd64-longtest builder of Go 1.15.2 commit
  * go#40881 testing: summary and test output interleaved
  * go#40742 runtime: pcdata is -2 and 12 locals stack map entries error on nil pointer
  * go#40693 plugin: program on linux/s390x sometimes hangs after calling "plugin.Open"
  * go#40643 runtime: race between stack shrinking and channel send/recv leads to bad sudog values</changelog>
  <changelog author="jkowalczyk@suse.com" date="1604664000">- go1.15.4 (released 2020-11-05) includes fixes to cgo, the
  compiler, linker, runtime, and the compress/flate, net/http,
  reflect, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#42169 cmd/compile, runtime, reflect: pointers to go:notinheap types must be stored indirectly in interfaces
  * go#42151 cmd/cgo: opaque struct pointers are broken since Go 1.15.3
  * go#42138 time: Location interprets wrong timezone (DST) with slim zoneinfo
  * go#42113 x/net/http2: the first write error on a connection will cause all subsequent write requests to fail blindly
  * go#41914 net/http: request.Clone doesn't deep copy TransferEncoding
  * go#41704 runtime: macOS syscall.Exec can get SIGILL due to preemption signal
  * go#41463 compress/flate: deflatefast produces corrupted output
  * go#41387 x/net/http2: connection-level flow control not returned if stream errors, causes server hang
  * go#40974 cmd/link: sectionForAddress(0xA9D67F) address not in any section file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1605182400">- go1.15.5 (released 2020-11-12) includes security fixes to the
  cmd/go and math/big packages.
  CVE-2020-28362 CVE-2020-28367 CVE-2020-28366
  Refs boo#1175132 go1.15 release tracking
  * boo#1178750 CVE-2020-28362
  * go#42554 math/big: panic during recursive division of very large numbers
  * boo#1178752 CVE-2020-28367
  * go#42562 cmd/go: arbitrary code can be injected into cgo generated files
  * boo#1178753 CVE-2020-28366
  * go#42558 cmd/go: improper validation of cgo flags can lead to remote code execution at build time</changelog>
  <changelog author="jkowalczyk@suse.com" date="1606996800">- go1.15.6 (released 2020-12-03) includes fixes to the compiler,
  linker, runtime, the go command, and the io package.
  Refs boo#1175132 go1.15 release tracking
  * go#42948 cmd/link: unexpected bindingNone in '_go.buildid'
  * go#42753 cmd/compile: ICE due to bad ORL constant
  * go#42636 runtime: infinite loop in lockextra on linux/amd64
  * go#42567 cmd/go: allow flags in CGO_LDFLAGS environment variable not in security allowlist
  * go#42550 io: Copy leaves file zero bytes in Azure AKS with CIFS - Go1.15 regression
  * go#42521 cmd/link: debug_line can contain multiple entries for the same PC address in Go 1.15.4
  * go#42369 internal/poll: CopyFileRange returns EIO on CentOS 7 ( Linux Kernel 3.10.0-1127) when io.Copy in mounted CIFS</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611057600">- go1.15.7 (released 2021-01-19) includes security fixes to the
  go command and crypto/elliptic package.
  CVE-2021-3114 CVE-2021-3115
  Refs boo#1175132 go1.15 release tracking
  * boo#1181145 CVE-2021-3114
  * go#43788 crypto/elliptic: incorrect operations on the P-224 curve
  * boo#1181146 CVE-2021-3115
  * go#43785 cmd/go: packages using cgo can cause arbitrary code execution on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1612526400">- go1.15.8 (released 2021-02-04) includes fixes to the compiler,
  linker, runtime, the go command, and the net/http package.
  Refs boo#1175132 go1.15 release tracking
  * go#43861 cmd/go: TestScript/get_update_unknown_protocol test fails
  * go#43860 cmd/go: handle space in path to C compiler
  * go#43833 runtime: SIGSEGV in runtime.deltimer on linux-mips-rtrk during ReadMemStats
  * go#43797 cmd/go: TestScript/mod_get_fallback relies on x/tools not being tagged
  * go#43793 internal/execabs: disable tests on js-wasm
  * go#43575 cmd/compile: 32-bit random data corruption
  * go#43406 x/mobile/cmd/gomobile: gomobile build on simple program returns "ld: error: duplicate symbol: x_cgo_inittls"
  * go#43214 cmd/link: panic: runtime error: slice bounds out of range [::1751306] with length 1048576
  * go#42539 net/http: race in http2Transport
  * go#42384 cmd/link: PE linker segfaults in addpersrc when cross-compiling</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.15.9 (released 2021-03-10) includes security fixes to the
  encoding/xml package.
  CVE-2021-27918
  Refs boo#1175132 go1.15 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44914 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.15.10 (released 2021-03-11) includes fixes to the compiler,
  the go command, and the net/http, os, syscall, and time packages.
  Refs boo#1175132 go1.15 release tracking
  * go#44792 cmd/go: mod tidy should ignore missing standard library packages
  * go#44658 runtime: marked free object in span
  * go#44617 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44592 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44294 net/http: ServeContent()/ServeFile() doesn't return expected response when WriteTimeout happens
  * go#44273 os: copy_file_range system call fails on some file systems
  * go#42935 net/http: Transport race condition by Content-Length == 0 response
  * go#42930 cmd/compile: miscompilation of some arithmetic and conditionals on arm</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.15.11 (released 2021-04-01) includes fixes to cgo, the
  compiler, linker, runtime, the go command, and the database/sql
  and net/http packages.
  Refs boo#1175132 go1.15 release tracking
  * go#45302 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45239 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45187 Strange behaviour with loops
  * go#45076 net/http: transport caches permanently broken persistent connections if write error happens during h2 handshake
  * go#44872 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44748 cmd/link: fail to build when using time/tzdata on ARM
  * go#43592 cmd/link: "x86_64-w64-mingw32/bin/ld.exe: Error: export ordinal too large" after upgrading to Go 1.15
  * go#43591 cmd/link: -buildmode=c-shared exports many functions, not just //export functions
  * go#42884 database/sql: deadlock on transaction stmt context cancel</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.15.12 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime and the
  time package.
  CVE-2021-31525
  Refs boo#1175132 go1.15 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45711 net/http: ReadRequest can stack overflow
  * go#45731 time, runtime: scheduled timer may never fire if GOMAXPROCS is reduced
  * go#45481 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45384 time: Europe/Dublin timezone handling broken with embedded timezone database</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.15.13 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the math/big
  and net/http packages.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1175132 go1.15 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46356 net: Lookup functions may return invalid host names
  * go#46531 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46396 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46314 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46305 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46143 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46127 cmd/link: internal error when externally linking very large binaries
  * go#46002 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45335 math/big: Int.Lsh gives wrong results on s390x for n&gt;=128</changelog>
</package>
<package pkgid="ad8a8f2b57b48609368c914051051cec6fa3c4c8b357eb285f5a9391904fae4a" name="go1.16" arch="aarch64">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="1dbb659c6f2ff23d57c580fa7c9f551533ccd380ee836fe091aa945021c411e0" name="go1.16" arch="ppc64le">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="85c0180bd07827027aa7fa15210c4637042583c15edff2582f9af0585daa6c79" name="go1.16" arch="s390x">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="e387c02c1c023dba5846e9875bec4c379916437201842648918e9da1308700ee" name="go1.16" arch="src">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="40ed3ce51694609f538efa89b49b7d37b55098098aaeda4144286bb4792ca0d2" name="go1.16" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="816b0e84cb0f983e38f82edb837d49dfbb4c5867f2fd4151ebd9710c15c2d4a8" name="go1.16-doc" arch="aarch64">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="493ef8ffa8078771e687f8d954e3fedaddcfc4737e336caa82ba580ba3d3e1cb" name="go1.16-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="c7cbd079694e68ef6f875e8fa9787771d423a0134f60672c6b4cf20eff78555b" name="go1.16-doc" arch="s390x">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="2725291ba4ca4dc5802d722800bd0358388b66afce41fd4c14ee5d91d1eea937" name="go1.16-doc" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="0b85a4f9926ceb3496fec4877d1bdddc3edd95f4a90addab2fbb288a622bf3d4" name="go1.16-race" arch="aarch64">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="7a4214fd7db911e28de6fe1bf74798d6b612aac9e9b15da7d1b8ffc435bf47dd" name="go1.16-race" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1608206400">- go1.16beta1 (released 2020-12-08) is a beta version of go1.16 cut
  from the master branch at the revision tagged go1.16beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1611835200">- go1.16rc1 (released 2021-01-28) is a release candidate of go1.16
  cut from the master branch at the revision tagged go1.16rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- go1.16 (released 2021-02-16) Go 1.16 is a major release of Go.
  go1.16.x minor releases will be provided through February 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1182345 go1.16 release tracking
  * See release notes https://golang.org/doc/go1.16. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Module-aware mode is enabled by default, regardless of whether
    a go.mod file is present in the current working directory or a
    parent directory. More precisely, the GO111MODULE environment
    variable now defaults to on. To switch to the previous
    behavior, set GO111MODULE to auto.
  * Build commands like go build and go test no longer modify
    go.mod and go.sum by default. Instead, they report an error if
    a module requirement or checksum needs to be added or updated
    (as if the -mod=readonly flag were used). Module requirements
    and sums may be adjusted with go mod tidy or go get.
  * go install now accepts arguments with version suffixes (for
    example, go install example.com/cmd@v1.0.0). This causes go
    install to build and install packages in module-aware mode,
    ignoring the go.mod file in the current directory or any parent
    directory, if there is one. This is useful for installing
    executables without affecting the dependencies of the main
    module.
  * go install, with or without a version suffix (as described
    above), is now the recommended way to build and install
    packages in module mode. go get should be used with the -d flag
    to adjust the current module's dependencies without building
    packages, and use of go get to build and install packages is
    deprecated. In a future release, the -d flag will always be
    enabled.
  * retract directives may now be used in a go.mod file to indicate
    that certain published versions of the module should not be
    used by other modules. A module author may retract a version
    after a severe problem is discovered or if the version was
    published unintentionally.
  * The go mod vendor and go mod tidy subcommands now accept the -e
    flag, which instructs them to proceed despite errors in
    resolving missing packages.
  * The go command now ignores requirements on module versions
    excluded by exclude directives in the main module. Previously,
    the go command used the next version higher than an excluded
    version, but that version could change over time, resulting in
    non-reproducible builds.
  * In module mode, the go command now disallows import paths that
    include non-ASCII characters or path elements with a leading
    dot character (.). Module paths with these characters were
    already disallowed (see Module paths and versions), so this
    change affects only paths within module subdirectories.
  * The go command now supports including static files and file
    trees as part of the final executable, using the new //go:embed
    directive. See the documentation for the new embed package for
    details.
  * When using go test, a test that calls os.Exit(0) during
    execution of a test function will now be considered to
    fail. This will help catch cases in which a test calls code
    that calls os.Exit(0) and thereby stops running all future
    tests. If a TestMain function calls os.Exit(0) that is still
    considered to be a passing test.
  * go test reports an error when the -c or -i flags are used
    together with unknown flags. Normally, unknown flags are passed
    to tests, but when -c or -i are used, tests are not run.
  * The go get -insecure flag is deprecated and will be removed in
    a future version. This flag permits fetching from repositories
    and resolving custom domains using insecure schemes such as
    HTTP, and also bypasses module sum validation using the
    checksum database. To permit the use of insecure schemes, use
    the GOINSECURE environment variable instead. To bypass module
    sum validation, use GOPRIVATE or GONOSUMDB. See go help
    environment for details.
  * go get example.com/mod@patch now requires that some version of
    example.com/mod already be required by the main
    module. (However, go get -u=patch continues to patch even
    newly-added dependencies.)
  * GOVCS is a new environment variable that limits which version
    control tools the go command may use to download source
    code. This mitigates security issues with tools that are
    typically used in trusted, authenticated environments. By
    default, git and hg may be used to download code from any
    repository. svn, bzr, and fossil may only be used to download
    code from repositories with module paths or package paths
    matching patterns in the GOPRIVATE environment variable. See go
    help vcs for details.
  * When the main module's go.mod file declares go 1.16 or higher,
    the all package pattern now matches only those packages that
    are transitively imported by a package or test found in the
    main module. (Packages imported by tests of packages imported
    by the main module are no longer included.) This is the same
    set of packages retained by go mod vendor since Go 1.11.
  * When the -toolexec build flag is specified to use a program
    when invoking toolchain programs like compile or asm, the
    environment variable TOOLEXEC_IMPORTPATH is now set to the
    import path of the package being built.
  * The -i flag accepted by go build, go install, and go test is
    now deprecated. The -i flag instructs the go command to install
    packages imported by packages named on the command line. Since
    the build cache was introduced in Go 1.10, the -i flag no
    longer has a significant effect on build times, and it causes
    errors when the install directory is not writable.
  * When the -export flag is specified, the BuildID field is now
    set to the build ID of the compiled package. This is equivalent
    to running go tool buildid on go list -exported -f {{.Export}},
    but without the extra step.
  * The -overlay flag specifies a JSON configuration file
    containing a set of file path replacements. The -overlay flag
    may be used with all build commands and go mod subcommands. It
    is primarily intended to be used by editor tooling such as
    gopls to understand the effects of unsaved changes to source
    files. The config file maps actual file paths to replacement
    file paths and the go command and its builds will run as if the
    actual file paths exist with the contents given by the
    replacement file paths, or don't exist if the replacement file
    paths are empty.
  * The cgo tool will no longer try to translate C struct bitfields
    into Go struct fields, even if their size can be represented in
    Go. The order in which C bitfields appear in memory is
    implementation dependent, so in some cases the cgo tool
    produced results that were silently incorrect.
  * The linux/riscv64 port now supports cgo and -buildmode=pie.
    This release also includes performance optimizations and code
    generation improvements for RISC-V.
  * The new runtime/metrics package introduces a stable interface
    for reading implementation-defined metrics from the Go
    runtime. It supersedes existing functions like
    runtime.ReadMemStats and debug.GCStats and is significantly
    more general and efficient. See the package documentation for
    more details.
  * Setting the GODEBUG environment variable to inittrace=1 now
    causes the runtime to emit a single line to standard error for
    each package init, summarizing its execution time and memory
    allocation. This trace can be used to find bottlenecks or
    regressions in Go startup performance. The GODEBUG
    documentation describes the format.
  * On Linux, the runtime now defaults to releasing memory to the
    operating system promptly (using MADV_DONTNEED), rather than
    lazily when the operating system is under memory pressure
    (using MADV_FREE). This means process-level memory statistics
    like RSS will more accurately reflect the amount of physical
    memory being used by Go processes. Systems that are currently
    using GODEBUG=madvdontneed=1 to improve memory monitoring
    behavior no longer need to set this environment variable.
  * Go 1.16 fixes a discrepancy between the race detector and the
    Go memory model. The race detector now more precisely follows
    the channel synchronization rules of the memory model. As a
    result, the detector may now report races it previously missed.
  * linker: This release includes additional improvements to the Go
    linker, reducing linker resource usage (both time and memory)
    and improving code robustness/maintainability. These changes
    form the second half of a two-release project to modernize the
    Go linker.
  * The linker changes in 1.16 extend the 1.15 improvements to all
    supported architecture/OS combinations (the 1.15 performance
    improvements were primarily focused on ELF-based OSes and amd64
    architectures). For a representative set of large Go programs,
    linking is 20-25% faster than 1.15 and requires 5-15% less
    memory on average for linux/amd64, with larger improvements for
    other architectures and OSes. Most binaries are also smaller as
    a result of more aggressive symbol pruning.
  * The new embed package provides access to files embedded in the
    program during compilation using the new //go:embed directive.
  * The new io/fs package defines the fs.FS interface, an
    abstraction for read-only trees of files. The standard library
    packages have been adapted to make use of the interface as
    appropriate.
  * For testing code that implements fs.FS, the new testing/fstest
    package provides a TestFS function that checks for and reports
    common mistakes. It also provides a simple in-memory file
    system implementation, MapFS, which can be useful for testing
    code that accepts fs.FS implementations.
  * syscall: On Linux, Setgid, Setuid, and related calls are now
    implemented. Previously, they returned an syscall.EOPNOTSUPP
    error. On Linux, the new functions AllThreadsSyscall and
    AllThreadsSyscall6 may be used to make a system call on all Go
    threads in the process. These functions may only be used by
    programs that do not use cgo; if a program uses cgo, they will
    always return syscall.ENOTSUP.
  * time/tzdata: The slim timezone data format is now used for the
    timezone database in $GOROOT/lib/time/zoneinfo.zip and the
    embedded copy in this package. This reduces the size of the
    timezone database by about 350 KB.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613649600">- gcc6-go.patch fix typo go-7 to go-6 for bootstrap on SLE-12 gcc6</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615377600">- go1.16.1 (released 2021-03-10) includes security fixes to the
  archive/zip and encoding/xml packages.
  CVE-2021-27918 CVE-2021-27919
  Refs boo#1182345 go1.16 release tracking
  * boo#1183333 CVE-2021-27918
  * go#44915 encoding/xml: infinite loop when using `xml.NewTokenDecoder` with a custom `TokenReader`
  * boo#1183334 CVE-2021-27919
  * go#44917 archive/zip: can panic when calling Reader.Open</changelog>
  <changelog author="jkowalczyk@suse.com" date="1615550400">- go1.16.2 (released 2021-03-11) includes fixes to cgo, the
  compiler, linker, the go command, and the syscall and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#44793 cmd/go: mod tidy should ignore missing standard library packages
  * go#44746 cmd/go: improve error message when outside a module from "working directory is not part of a module"
  * go#44676 cmd/go: warning message when getting a retracted module version is missing a trailing newline
  * go#44659 runtime: marked free object in span
  * go#44647 cmd/go: "malformed import path" in Go 1.16 for packages with path elements containing a leading dot
  * go#44638 cmd/link: runtime crash, unexpected fault address 0xffffffffffffffff, h2_bundle.go, when using plugin
  * go#44618 time: LoadLocationFromTZData with slim tzdata uses incorrect zone
  * go#44593 syscall &amp; x/sys/windows: buffer overflow in GetQueuedCompletionStatus
  * go#44498 cmd/go: 'go mod edit -exclude' erroneously rejects '+incompatible' versions
  * go#44496 cmd/go: malformed module path with retract v2+
  * go#44464 cmd/compile: ICE on deferred call to syscall.LazyDLL.Call
  * go#44462 x/tools/go/analysis, syscall: ptrace redeclared in this block
  * go#44433 cmd/compile: Compiler regression in Go 1.16 - internal compiler error: child dcl collision on symbol
  * go#44402 doc: Broken image in readme
  * go#44358 cmd/compile: internal compiler error: Value live at entry. It shouldn't be.
  * go#44346 runtime/cgo: cannot build with -Wsign-compare</changelog>
  <changelog author="jkowalczyk@suse.com" date="1617364800">- go1.16.3 (released 2021-04-01) includes fixes to the compiler,
  linker, runtime, the go command, and the testing and time
  packages.
  Refs boo#1182345 go1.16 release tracking
  * go#45303 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback
  * go#45253 cmd/compile: fix long RMW bit operations on AMD64
  * go#45240 all: run.{bash,bat,rc} sets GOPATH inconsistently
  * go#45192 Strange behaviour with loops
  * go#45030 cmd/link: go 1.16 plugin does not initialize global variables correctly when not used directly
  * go#44888 testing: Helper line number has changed in 1.16
  * go#44885 cmd/go: import paths ending with '+' are rejected (affects executable like g++ or clang++)
  * go#44869 time, runtime: zero duration timer takes 2 minutes to fire
  * go#44860 cmd/go: documentation at golang.org for cmd/go has confusing formatting
  * go#44812 cmd/go: 'go get' does not add missing hash to go.sum when ziphash file missing from cache
  * go#44640 cmd/link: fail to build when using time/tzdata on ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1620388800">- go1.16.4 (released 2021-05-06) includes a security fix to the
  net/http package, as well as bug fixes to the runtime, the
  compiler, and the archive/zip, time, and syscall packages.
  CVE-2021-31525
  Refs boo#1182345 go1.16 release tracking
  * boo#1185790 CVE-2021-31525
  * go#45712 net/http: ReadRequest can stack overflow
  * go#45636 cmd/compile: internal compiler error: Invalid PPC64 rotate mask
  * go#45482 runtime: "invalid pc-encoded table" throw caused by bad cgo traceback (expandFinalInlineFrames)
  * go#45385 time: Europe/Dublin timezone handling broken with embedded timezone database
  * go#45347 archive/zip: duplicate entries in FS interface
  * go#45307 os/signal: timeout in TestAllThreadsSyscallSignals</changelog>
  <changelog author="jkowalczyk@suse.com" date="1622721600">- go1.16.5 (released 2021-06-03) includes security fixes to the
  archive/zip, math/big, net, and net/http/httputil packages, as
  well as bug fixes to the linker, the go command, and the net/http
  package.
  CVE-2021-33195 CVE-2021-33196 CVE-2021-33197 CVE-2021-33198
  Refs boo#1182345 go1.16 release tracking
  * boo#1187443 go#46241 CVE-2021-33195
  * go#46357 net: Lookup functions may return invalid host names
  * go#46530 net: Unix dnsclient test for CVE-2021-33195 assumes that 1.2.3.4 does not resolve
  * boo#1186622 go#46242 CVE-2021-33196
  * go#46397 archive/zip: malformed archive may cause panic or memory exhaustion
  * boo#1187444 go#46313 CVE-2021-33197
  * go#46315 net/http/httputil: ReverseProxy forwards Connection headers if first one is empty
  * boo#1187445 go#45910 CVE-2021-33198
  * go#46306 math/big: (*Rat).SetString with "1.770p02041010010011001001" crashes with "makeslice: len out of range"
  * go#46214 cmd/go: make go mod download with no arguments leave go.sum alone
  * go#46144 cmd/go: error out of 'go mod tidy' if the go.mod file specifies a newer-than-supported Go version
  * go#46128 cmd/link: internal error when externally linking very large binaries
  * go#45927 cmd/link: SIGSEGV running 'openshift-install version' for release-4.8 using external linking on PPC64LE
  * go#45832 cmd/link: unexpected trampoline when cross-compiling to ppc64le</changelog>
</package>
<package pkgid="118933a373214e237dfec0583065289575a9f25db7d72483446705e6a04b885d" name="golang-github-prometheus-node_exporter" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="3.9.3"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="jan.fajerski@suse.com" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="michael@stroeder.com" date="1565870400">- Update to 0.18.1
  0.18.1 / 2019-06-04
  Changes
  * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD #1345
  * [BUGFIX] Fix rollover bug in mountstats collector #1364
  0.18.0 / 2019-05-09
  Breaking changes
  * Renamed interface label to device in netclass collector for consistency with
  * other network metrics #1224
  * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. #1248
  * The labels for the network_up metric have changed, see issue #1236
  * Bonding collector now uses mii_status instead of operstatus #1124
  * Several systemd metrics have been turned off by default to improve performance #1254
  * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds
  * The systemd collector blacklist now includes automount, device, mount, and slice units by default. #1255
  Changes
  * [CHANGE] Bonding state uses mii_status #1124
  * [CHANGE] Add a limit to the number of in-flight requests #1166
  * [CHANGE] Renamed interface label to device in netclass collector #1224
  * [CHANGE] Add separate cpufreq and scaling metrics #1248
  * [CHANGE] Several systemd metrics have been turned off by default to improve performance #1254
  * [CHANGE] Expand systemd collector blacklist #1255
  * [CHANGE] Split cpufreq metrics into a separate collector #1253
  * [FEATURE] Add a flag to disable exporter metrics #1148
  * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors #1197
  * [FEATURE] Add uname collector for FreeBSD #1239
  * [FEATURE] Add diskstats collector for OpenBSD #1250
  * [FEATURE] Add pressure collector exposing pressure stall information for Linux #1174
  * [FEATURE] Add perf exporter for Linux #1274
  * [ENHANCEMENT] Add Infiniband counters #1120
  * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter #1143
  * [ENHANCEMENT] Move network_up labels into new metric network_info #1236
  * [ENHANCEMENT] Use 64-bit counters for Darwin netstat
  * [BUGFIX] Add fallback for missing /proc/1/mounts #1172
  * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks #1326</changelog>
  <changelog author="dmaiocchi@suse.com" date="1569326400">- Add missing sysconfig file in rpm  bsc#1151557</changelog>
  <changelog author="michael@stroeder.com" date="1582200000">- update to 1.0.0-rc.0
  Breaking changes
  * The netdev collector CLI argument --collector.netdev.ignored-devices
    was renamed to --collector.netdev.device-blacklist in order to conform
    with the systemd collector. #1279
  * The label named state on node_systemd_service_restart_total metrics was
    changed to name to better describe the metric. #1393
  * Refactoring of the mdadm collector changes several metrics
    node_md_disks_active is removed
    node_md_disks now has a state label for "fail", "spare", "active" disks.
    node_md_is_active is replaced by node_md_state with a state set of
    "active", "inactive", "recovering", "resync".
  * Additional label mountaddr added to NFS device metrics to distinguish
    mounts from the same URL, but different IP addresses. #1417
  * Metrics node_cpu_scaling_frequency_min_hrts and
    node_cpu_scaling_frequency_max_hrts of the cpufreq collector were
    renamed to node_cpu_scaling_frequency_min_hertz and
    node_cpu_scaling_frequency_max_hertz. #1510
  * Collectors that are enabled, but are unable to find data to collect,
    now return 0 for node_scrape_collector_success.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1598011200">- Update to 1.0.1
  * Changes to build specification
    + Modify spec: update golang version to 1.14
    + Remove update tarball script
    + Add _service file to allow for updates via `osc service disabledrun`
  * Bug fixes
    + [BUGFIX] filesystem_freebsd: Fix label values #1728
    + [BUGFIX] Update prometheus/procfs to fix log noise #1735
    + [BUGFIX] Fix build tags for collectors #1745
    + [BUGFIX] Handle no data from powersupplyclass #1747, #1749
- Update to 1.0.0
  * Bug fixes
    + [BUGFIX] Read /proc/net files with a single read syscall #1380
    + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393
    + [BUGFIX] Fix netdev nil reference on Darwin #1414
    + [BUGFIX] Strip path.rootfs from mountpoint labels #1421
    + [BUGFIX] Fix seconds reported by schedstat #1426
    + [BUGFIX] Fix empty string in path.rootfs #1464
    + [BUGFIX] Fix typo in cpufreq metric names #1510
    + [BUGFIX] Read /proc/stat in one syscall #1538
    + [BUGFIX] Fix OpenBSD cache memory information #1542
    + [BUGFIX] Refactor textfile collector to avoid looping defer #1549
    + [BUGFIX] Fix network speed math #1580
    + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647
    + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665
    + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671
  * Several enhancements
    + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614168000">- Do not include sources (bsc#1151558)
- Remove rc symlink</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
</package>
<package pkgid="f72d1c9dad51abaf4faf47f49f149b1e67834d4d77097c33f11e8154ea59b96f" name="golang-github-prometheus-node_exporter" arch="ppc64le">
  <version epoch="0" ver="1.1.2" rel="3.9.3"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="jan.fajerski@suse.com" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="michael@stroeder.com" date="1565870400">- Update to 0.18.1
  0.18.1 / 2019-06-04
  Changes
  * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD #1345
  * [BUGFIX] Fix rollover bug in mountstats collector #1364
  0.18.0 / 2019-05-09
  Breaking changes
  * Renamed interface label to device in netclass collector for consistency with
  * other network metrics #1224
  * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. #1248
  * The labels for the network_up metric have changed, see issue #1236
  * Bonding collector now uses mii_status instead of operstatus #1124
  * Several systemd metrics have been turned off by default to improve performance #1254
  * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds
  * The systemd collector blacklist now includes automount, device, mount, and slice units by default. #1255
  Changes
  * [CHANGE] Bonding state uses mii_status #1124
  * [CHANGE] Add a limit to the number of in-flight requests #1166
  * [CHANGE] Renamed interface label to device in netclass collector #1224
  * [CHANGE] Add separate cpufreq and scaling metrics #1248
  * [CHANGE] Several systemd metrics have been turned off by default to improve performance #1254
  * [CHANGE] Expand systemd collector blacklist #1255
  * [CHANGE] Split cpufreq metrics into a separate collector #1253
  * [FEATURE] Add a flag to disable exporter metrics #1148
  * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors #1197
  * [FEATURE] Add uname collector for FreeBSD #1239
  * [FEATURE] Add diskstats collector for OpenBSD #1250
  * [FEATURE] Add pressure collector exposing pressure stall information for Linux #1174
  * [FEATURE] Add perf exporter for Linux #1274
  * [ENHANCEMENT] Add Infiniband counters #1120
  * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter #1143
  * [ENHANCEMENT] Move network_up labels into new metric network_info #1236
  * [ENHANCEMENT] Use 64-bit counters for Darwin netstat
  * [BUGFIX] Add fallback for missing /proc/1/mounts #1172
  * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks #1326</changelog>
  <changelog author="dmaiocchi@suse.com" date="1569326400">- Add missing sysconfig file in rpm  bsc#1151557</changelog>
  <changelog author="michael@stroeder.com" date="1582200000">- update to 1.0.0-rc.0
  Breaking changes
  * The netdev collector CLI argument --collector.netdev.ignored-devices
    was renamed to --collector.netdev.device-blacklist in order to conform
    with the systemd collector. #1279
  * The label named state on node_systemd_service_restart_total metrics was
    changed to name to better describe the metric. #1393
  * Refactoring of the mdadm collector changes several metrics
    node_md_disks_active is removed
    node_md_disks now has a state label for "fail", "spare", "active" disks.
    node_md_is_active is replaced by node_md_state with a state set of
    "active", "inactive", "recovering", "resync".
  * Additional label mountaddr added to NFS device metrics to distinguish
    mounts from the same URL, but different IP addresses. #1417
  * Metrics node_cpu_scaling_frequency_min_hrts and
    node_cpu_scaling_frequency_max_hrts of the cpufreq collector were
    renamed to node_cpu_scaling_frequency_min_hertz and
    node_cpu_scaling_frequency_max_hertz. #1510
  * Collectors that are enabled, but are unable to find data to collect,
    now return 0 for node_scrape_collector_success.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1598011200">- Update to 1.0.1
  * Changes to build specification
    + Modify spec: update golang version to 1.14
    + Remove update tarball script
    + Add _service file to allow for updates via `osc service disabledrun`
  * Bug fixes
    + [BUGFIX] filesystem_freebsd: Fix label values #1728
    + [BUGFIX] Update prometheus/procfs to fix log noise #1735
    + [BUGFIX] Fix build tags for collectors #1745
    + [BUGFIX] Handle no data from powersupplyclass #1747, #1749
- Update to 1.0.0
  * Bug fixes
    + [BUGFIX] Read /proc/net files with a single read syscall #1380
    + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393
    + [BUGFIX] Fix netdev nil reference on Darwin #1414
    + [BUGFIX] Strip path.rootfs from mountpoint labels #1421
    + [BUGFIX] Fix seconds reported by schedstat #1426
    + [BUGFIX] Fix empty string in path.rootfs #1464
    + [BUGFIX] Fix typo in cpufreq metric names #1510
    + [BUGFIX] Read /proc/stat in one syscall #1538
    + [BUGFIX] Fix OpenBSD cache memory information #1542
    + [BUGFIX] Refactor textfile collector to avoid looping defer #1549
    + [BUGFIX] Fix network speed math #1580
    + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647
    + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665
    + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671
  * Several enhancements
    + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614168000">- Do not include sources (bsc#1151558)
- Remove rc symlink</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
</package>
<package pkgid="8e964c644c3b1c4c13450d594c32e82a56130284e37e43151eb854ec7d5d3e98" name="golang-github-prometheus-node_exporter" arch="s390x">
  <version epoch="0" ver="1.1.2" rel="3.9.3"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="jan.fajerski@suse.com" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="michael@stroeder.com" date="1565870400">- Update to 0.18.1
  0.18.1 / 2019-06-04
  Changes
  * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD #1345
  * [BUGFIX] Fix rollover bug in mountstats collector #1364
  0.18.0 / 2019-05-09
  Breaking changes
  * Renamed interface label to device in netclass collector for consistency with
  * other network metrics #1224
  * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. #1248
  * The labels for the network_up metric have changed, see issue #1236
  * Bonding collector now uses mii_status instead of operstatus #1124
  * Several systemd metrics have been turned off by default to improve performance #1254
  * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds
  * The systemd collector blacklist now includes automount, device, mount, and slice units by default. #1255
  Changes
  * [CHANGE] Bonding state uses mii_status #1124
  * [CHANGE] Add a limit to the number of in-flight requests #1166
  * [CHANGE] Renamed interface label to device in netclass collector #1224
  * [CHANGE] Add separate cpufreq and scaling metrics #1248
  * [CHANGE] Several systemd metrics have been turned off by default to improve performance #1254
  * [CHANGE] Expand systemd collector blacklist #1255
  * [CHANGE] Split cpufreq metrics into a separate collector #1253
  * [FEATURE] Add a flag to disable exporter metrics #1148
  * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors #1197
  * [FEATURE] Add uname collector for FreeBSD #1239
  * [FEATURE] Add diskstats collector for OpenBSD #1250
  * [FEATURE] Add pressure collector exposing pressure stall information for Linux #1174
  * [FEATURE] Add perf exporter for Linux #1274
  * [ENHANCEMENT] Add Infiniband counters #1120
  * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter #1143
  * [ENHANCEMENT] Move network_up labels into new metric network_info #1236
  * [ENHANCEMENT] Use 64-bit counters for Darwin netstat
  * [BUGFIX] Add fallback for missing /proc/1/mounts #1172
  * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks #1326</changelog>
  <changelog author="dmaiocchi@suse.com" date="1569326400">- Add missing sysconfig file in rpm  bsc#1151557</changelog>
  <changelog author="michael@stroeder.com" date="1582200000">- update to 1.0.0-rc.0
  Breaking changes
  * The netdev collector CLI argument --collector.netdev.ignored-devices
    was renamed to --collector.netdev.device-blacklist in order to conform
    with the systemd collector. #1279
  * The label named state on node_systemd_service_restart_total metrics was
    changed to name to better describe the metric. #1393
  * Refactoring of the mdadm collector changes several metrics
    node_md_disks_active is removed
    node_md_disks now has a state label for "fail", "spare", "active" disks.
    node_md_is_active is replaced by node_md_state with a state set of
    "active", "inactive", "recovering", "resync".
  * Additional label mountaddr added to NFS device metrics to distinguish
    mounts from the same URL, but different IP addresses. #1417
  * Metrics node_cpu_scaling_frequency_min_hrts and
    node_cpu_scaling_frequency_max_hrts of the cpufreq collector were
    renamed to node_cpu_scaling_frequency_min_hertz and
    node_cpu_scaling_frequency_max_hertz. #1510
  * Collectors that are enabled, but are unable to find data to collect,
    now return 0 for node_scrape_collector_success.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1598011200">- Update to 1.0.1
  * Changes to build specification
    + Modify spec: update golang version to 1.14
    + Remove update tarball script
    + Add _service file to allow for updates via `osc service disabledrun`
  * Bug fixes
    + [BUGFIX] filesystem_freebsd: Fix label values #1728
    + [BUGFIX] Update prometheus/procfs to fix log noise #1735
    + [BUGFIX] Fix build tags for collectors #1745
    + [BUGFIX] Handle no data from powersupplyclass #1747, #1749
- Update to 1.0.0
  * Bug fixes
    + [BUGFIX] Read /proc/net files with a single read syscall #1380
    + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393
    + [BUGFIX] Fix netdev nil reference on Darwin #1414
    + [BUGFIX] Strip path.rootfs from mountpoint labels #1421
    + [BUGFIX] Fix seconds reported by schedstat #1426
    + [BUGFIX] Fix empty string in path.rootfs #1464
    + [BUGFIX] Fix typo in cpufreq metric names #1510
    + [BUGFIX] Read /proc/stat in one syscall #1538
    + [BUGFIX] Fix OpenBSD cache memory information #1542
    + [BUGFIX] Refactor textfile collector to avoid looping defer #1549
    + [BUGFIX] Fix network speed math #1580
    + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647
    + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665
    + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671
  * Several enhancements
    + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614168000">- Do not include sources (bsc#1151558)
- Remove rc symlink</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
</package>
<package pkgid="4add0ede96f30c11e742e1da12faf7382391217ba43fbc52c5d1724bfa916628" name="golang-github-prometheus-node_exporter" arch="src">
  <version epoch="0" ver="1.1.2" rel="3.9.3"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="jan.fajerski@suse.com" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="michael@stroeder.com" date="1565870400">- Update to 0.18.1
  0.18.1 / 2019-06-04
  Changes
  * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD #1345
  * [BUGFIX] Fix rollover bug in mountstats collector #1364
  0.18.0 / 2019-05-09
  Breaking changes
  * Renamed interface label to device in netclass collector for consistency with
  * other network metrics #1224
  * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. #1248
  * The labels for the network_up metric have changed, see issue #1236
  * Bonding collector now uses mii_status instead of operstatus #1124
  * Several systemd metrics have been turned off by default to improve performance #1254
  * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds
  * The systemd collector blacklist now includes automount, device, mount, and slice units by default. #1255
  Changes
  * [CHANGE] Bonding state uses mii_status #1124
  * [CHANGE] Add a limit to the number of in-flight requests #1166
  * [CHANGE] Renamed interface label to device in netclass collector #1224
  * [CHANGE] Add separate cpufreq and scaling metrics #1248
  * [CHANGE] Several systemd metrics have been turned off by default to improve performance #1254
  * [CHANGE] Expand systemd collector blacklist #1255
  * [CHANGE] Split cpufreq metrics into a separate collector #1253
  * [FEATURE] Add a flag to disable exporter metrics #1148
  * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors #1197
  * [FEATURE] Add uname collector for FreeBSD #1239
  * [FEATURE] Add diskstats collector for OpenBSD #1250
  * [FEATURE] Add pressure collector exposing pressure stall information for Linux #1174
  * [FEATURE] Add perf exporter for Linux #1274
  * [ENHANCEMENT] Add Infiniband counters #1120
  * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter #1143
  * [ENHANCEMENT] Move network_up labels into new metric network_info #1236
  * [ENHANCEMENT] Use 64-bit counters for Darwin netstat
  * [BUGFIX] Add fallback for missing /proc/1/mounts #1172
  * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks #1326</changelog>
  <changelog author="dmaiocchi@suse.com" date="1569326400">- Add missing sysconfig file in rpm  bsc#1151557</changelog>
  <changelog author="michael@stroeder.com" date="1582200000">- update to 1.0.0-rc.0
  Breaking changes
  * The netdev collector CLI argument --collector.netdev.ignored-devices
    was renamed to --collector.netdev.device-blacklist in order to conform
    with the systemd collector. #1279
  * The label named state on node_systemd_service_restart_total metrics was
    changed to name to better describe the metric. #1393
  * Refactoring of the mdadm collector changes several metrics
    node_md_disks_active is removed
    node_md_disks now has a state label for "fail", "spare", "active" disks.
    node_md_is_active is replaced by node_md_state with a state set of
    "active", "inactive", "recovering", "resync".
  * Additional label mountaddr added to NFS device metrics to distinguish
    mounts from the same URL, but different IP addresses. #1417
  * Metrics node_cpu_scaling_frequency_min_hrts and
    node_cpu_scaling_frequency_max_hrts of the cpufreq collector were
    renamed to node_cpu_scaling_frequency_min_hertz and
    node_cpu_scaling_frequency_max_hertz. #1510
  * Collectors that are enabled, but are unable to find data to collect,
    now return 0 for node_scrape_collector_success.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1598011200">- Update to 1.0.1
  * Changes to build specification
    + Modify spec: update golang version to 1.14
    + Remove update tarball script
    + Add _service file to allow for updates via `osc service disabledrun`
  * Bug fixes
    + [BUGFIX] filesystem_freebsd: Fix label values #1728
    + [BUGFIX] Update prometheus/procfs to fix log noise #1735
    + [BUGFIX] Fix build tags for collectors #1745
    + [BUGFIX] Handle no data from powersupplyclass #1747, #1749
- Update to 1.0.0
  * Bug fixes
    + [BUGFIX] Read /proc/net files with a single read syscall #1380
    + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393
    + [BUGFIX] Fix netdev nil reference on Darwin #1414
    + [BUGFIX] Strip path.rootfs from mountpoint labels #1421
    + [BUGFIX] Fix seconds reported by schedstat #1426
    + [BUGFIX] Fix empty string in path.rootfs #1464
    + [BUGFIX] Fix typo in cpufreq metric names #1510
    + [BUGFIX] Read /proc/stat in one syscall #1538
    + [BUGFIX] Fix OpenBSD cache memory information #1542
    + [BUGFIX] Refactor textfile collector to avoid looping defer #1549
    + [BUGFIX] Fix network speed math #1580
    + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647
    + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665
    + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671
  * Several enhancements
    + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614168000">- Do not include sources (bsc#1151558)
- Remove rc symlink</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
</package>
<package pkgid="a1f4b4e782390fff59225d02823a1b9b673432603fdadb7ad7e4f0902bafe81c" name="golang-github-prometheus-node_exporter" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="3.9.3"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="tserong@suse.com" date="1494331200">- Add systemd unit file
- Run as unprivileged "prometheus" user</changelog>
  <changelog author="tserong@suse.com" date="1501156800">- Add BuildRequires: fdupes</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.15.2
  See https://github.com/prometheus/node_exporter/blob/master/CHANGELOG.md
- Provides node_exporter, prometheus(node_exporter)</changelog>
  <changelog author="marix@marix.org" date="1518955200">- Run tests during packaging</changelog>
  <changelog author="jan.fajerski@suse.com" date="1543492800">- Update to 0.16.0
  + includes breaking changes
  + several metrics renamed
  + split out cpu guest metrics
  See https://github.com/prometheus/node_exporter/releases/tag/v0.16.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1544529600">- Update to 0.17.0
  + includes breaking changes
  + supvervisord collector reports start_time_seconds rather than uptime
  + The wifi collector is disabled by default due to suspected caching issues and goroutine leaks
  See https://github.com/prometheus/node_exporter/releases/tag/v0.17.0
  for full changelog</changelog>
  <changelog author="jan.fajerski@suse.com" date="1564747200">- Add network-online (Wants and After) dependency to systemd unit bsc#1143913</changelog>
  <changelog author="michael@stroeder.com" date="1565870400">- Update to 0.18.1
  0.18.1 / 2019-06-04
  Changes
  * [BUGFIX] Fix incorrect sysctl call in BSD meminfo collector, resulting in broken swap metrics on FreeBSD #1345
  * [BUGFIX] Fix rollover bug in mountstats collector #1364
  0.18.0 / 2019-05-09
  Breaking changes
  * Renamed interface label to device in netclass collector for consistency with
  * other network metrics #1224
  * The cpufreq metrics now separate the cpufreq and scaling data based on what the driver provides. #1248
  * The labels for the network_up metric have changed, see issue #1236
  * Bonding collector now uses mii_status instead of operstatus #1124
  * Several systemd metrics have been turned off by default to improve performance #1254
  * These include unit_tasks_current, unit_tasks_max, service_restart_total, and unit_start_time_seconds
  * The systemd collector blacklist now includes automount, device, mount, and slice units by default. #1255
  Changes
  * [CHANGE] Bonding state uses mii_status #1124
  * [CHANGE] Add a limit to the number of in-flight requests #1166
  * [CHANGE] Renamed interface label to device in netclass collector #1224
  * [CHANGE] Add separate cpufreq and scaling metrics #1248
  * [CHANGE] Several systemd metrics have been turned off by default to improve performance #1254
  * [CHANGE] Expand systemd collector blacklist #1255
  * [CHANGE] Split cpufreq metrics into a separate collector #1253
  * [FEATURE] Add a flag to disable exporter metrics #1148
  * [FEATURE] Add kstat-based Solaris metrics for boottime, cpu and zfs collectors #1197
  * [FEATURE] Add uname collector for FreeBSD #1239
  * [FEATURE] Add diskstats collector for OpenBSD #1250
  * [FEATURE] Add pressure collector exposing pressure stall information for Linux #1174
  * [FEATURE] Add perf exporter for Linux #1274
  * [ENHANCEMENT] Add Infiniband counters #1120
  * [ENHANCEMENT] Add TCPSynRetrans to netstat default filter #1143
  * [ENHANCEMENT] Move network_up labels into new metric network_info #1236
  * [ENHANCEMENT] Use 64-bit counters for Darwin netstat
  * [BUGFIX] Add fallback for missing /proc/1/mounts #1172
  * [BUGFIX] Fix node_textfile_mtime_seconds to work properly on symlinks #1326</changelog>
  <changelog author="dmaiocchi@suse.com" date="1569326400">- Add missing sysconfig file in rpm  bsc#1151557</changelog>
  <changelog author="michael@stroeder.com" date="1582200000">- update to 1.0.0-rc.0
  Breaking changes
  * The netdev collector CLI argument --collector.netdev.ignored-devices
    was renamed to --collector.netdev.device-blacklist in order to conform
    with the systemd collector. #1279
  * The label named state on node_systemd_service_restart_total metrics was
    changed to name to better describe the metric. #1393
  * Refactoring of the mdadm collector changes several metrics
    node_md_disks_active is removed
    node_md_disks now has a state label for "fail", "spare", "active" disks.
    node_md_is_active is replaced by node_md_state with a state set of
    "active", "inactive", "recovering", "resync".
  * Additional label mountaddr added to NFS device metrics to distinguish
    mounts from the same URL, but different IP addresses. #1417
  * Metrics node_cpu_scaling_frequency_min_hrts and
    node_cpu_scaling_frequency_max_hrts of the cpufreq collector were
    renamed to node_cpu_scaling_frequency_min_hertz and
    node_cpu_scaling_frequency_max_hertz. #1510
  * Collectors that are enabled, but are unable to find data to collect,
    now return 0 for node_scrape_collector_success.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1598011200">- Update to 1.0.1
  * Changes to build specification
    + Modify spec: update golang version to 1.14
    + Remove update tarball script
    + Add _service file to allow for updates via `osc service disabledrun`
  * Bug fixes
    + [BUGFIX] filesystem_freebsd: Fix label values #1728
    + [BUGFIX] Update prometheus/procfs to fix log noise #1735
    + [BUGFIX] Fix build tags for collectors #1745
    + [BUGFIX] Handle no data from powersupplyclass #1747, #1749
- Update to 1.0.0
  * Bug fixes
    + [BUGFIX] Read /proc/net files with a single read syscall #1380
    + [BUGFIX] Renamed label state to name on node_systemd_service_restart_total. #1393
    + [BUGFIX] Fix netdev nil reference on Darwin #1414
    + [BUGFIX] Strip path.rootfs from mountpoint labels #1421
    + [BUGFIX] Fix seconds reported by schedstat #1426
    + [BUGFIX] Fix empty string in path.rootfs #1464
    + [BUGFIX] Fix typo in cpufreq metric names #1510
    + [BUGFIX] Read /proc/stat in one syscall #1538
    + [BUGFIX] Fix OpenBSD cache memory information #1542
    + [BUGFIX] Refactor textfile collector to avoid looping defer #1549
    + [BUGFIX] Fix network speed math #1580
    + [BUGFIX] collector/systemd: use regexp to extract systemd version #1647
    + [BUGFIX] Fix initialization in perf collector when using multiple CPUs #1665
    + [BUGFIX] Fix accidentally empty lines in meminfo_linux #1671
  * Several enhancements
    + See https://github.com/prometheus/node_exporter/releases/tag/v1.0.0</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614168000">- Do not include sources (bsc#1151558)
- Remove rc symlink</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614254400">- Migrate to obs_scm
- Migrate to go_modules
- Update to 1.1.1
  * Bug fixes
    + Fix ineffassign issue #1957
    + Fix some noisy log lines #1962
- Update to 1.1.0
  * Changes
    + Improve filter flag names #1743
    + Add btrfs and powersupplyclass to list of exporters enabled by default #1897
  * Features
    + Add fibre channel collector #1786
    + Expose cpu bugs and flags as info metrics. #1788
    + Add network_route collector #1811
    + Add zoneinfo collector #1922
  * Enhancements
    + Add more InfiniBand counters #1694
    + Add flag to aggr ipvs metrics to avoid high cardinality metrics #1709
    + Adding backlog/current queue length to qdisc collector #1732
    + Include TCP OutRsts in netstat metrics #1733
    + Add pool size to entropy collector #1753
    + Remove CGO dependencies for OpenBSD amd64 #1774
    + bcache: add writeback_rate_debug stats #1658
    + Add check state for mdadm arrays via node_md_state metric #1810
    + Expose XFS inode statistics #1870
    + Expose zfs zpool state #1878
    + Added an ability to pass collector.supervisord.url via SUPERVISORD_URL environment variable #1947
  * Bug fixes
    + filesystem_freebsd: Fix label values #1728
    + Fix various procfs parsing errors #1735
    + Handle no data from powersupplyclass #1747
    + udp_queues_linux.go: change upd to udp in two error strings #1769
    + Fix node_scrape_collector_success behaviour #1816
    + Fix NodeRAIDDegraded to not use a string rule expressions #1827
    + Fix node_md_disks state label from fail to failed #1862
    + Handle EPERM for syscall in timex collector #1938
    + bcache: fix typo in a metric name #1943
    + Fix XFS read/write stats (https://github.com/prometheus/procfs/pull/343)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1614340800">- Trim old specfile constructs</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Update to 1.1.2
  * Bug fixes
    + Handle errors from disabled PSI subsystem #1983
    + Sanitize strings from /sys/class/power_supply #1984
    + Silence missing netclass errors #1986</changelog>
</package>
<package pkgid="9eb2efcd9f0e909641393fd306eeb1c94c6f44f482ed9d98b428b77af4202a72" name="google-guest-agent" arch="aarch64">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="9920caabeb50eb6c4e295b655b7ade9da0250cf478ea5d07b19a34405988a2da" name="google-guest-agent" arch="ppc64le">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="c12980e4cf5346dd13d77d9e9e312fe667d8612f963ea5bb1bdc03ae08131789" name="google-guest-agent" arch="s390x">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="1e61781c830c9c5efae6a6401bd7d5da9a8aef86ffc12909e194ef4b123700dd" name="google-guest-agent" arch="src">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="f53ebba6e99fc93f57ecc6e508ef84cc3b1cbb2f505e554156ff06bf5aeb0ba9" name="google-guest-agent" arch="x86_64">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="aa44d63f7a854293695f1465b4bfc35a2bc517f5517ce197653337021cd27dcb" name="google-guest-configs" arch="noarch">
  <version epoch="0" ver="20210317.00" rel="1.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200626.00
  + Replaces configuration from google-compute-engine-{init,oslogin} package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Switch udev requires to pkgconfig to allow the build service to use
  the -mini package for build optimization</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200626.00 (bsc#1175740, bsc#1175741)
  * Updates the udev rules for local SSD disks. (#9)
  * Fix tx affinity logic when number of CPUs is above 32 (#6)</changelog>
  <changelog author="rjschwei@suse.com" date="1609848000">- Remove service files (bsc#1180304)
  + google-optimize-local-ssd.service, google-set-multiqueue.service
    scripts are called from within the guest agent</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210317.00 (bsc#1183414, bsc#1183415)
  * dracut.conf wants spaces around values (#19)
  * make the same change for debian (#18)
  * change path back for google_nvme_id (#17)
  * move google_nvme_id to /usr/bin (#16)
  * correct udev rule syntax (#15)
  * prune el6 spec (#13)
  * Updated udev rules (#11)
- Remove empty %{_sbindir} from %install and %files section</changelog>
</package>
<package pkgid="0cdcdce05992ace015e0d75f37976dde758b67203c0096778891fa53b56dfb93" name="google-guest-configs" arch="src">
  <version epoch="0" ver="20210317.00" rel="1.13.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200626.00
  + Replaces configuration from google-compute-engine-{init,oslogin} package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- Switch udev requires to pkgconfig to allow the build service to use
  the -mini package for build optimization</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200626.00 (bsc#1175740, bsc#1175741)
  * Updates the udev rules for local SSD disks. (#9)
  * Fix tx affinity logic when number of CPUs is above 32 (#6)</changelog>
  <changelog author="rjschwei@suse.com" date="1609848000">- Remove service files (bsc#1180304)
  + google-optimize-local-ssd.service, google-set-multiqueue.service
    scripts are called from within the guest agent</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210317.00 (bsc#1183414, bsc#1183415)
  * dracut.conf wants spaces around values (#19)
  * make the same change for debian (#18)
  * change path back for google_nvme_id (#17)
  * move google_nvme_id to /usr/bin (#16)
  * correct udev rule syntax (#15)
  * prune el6 spec (#13)
  * Updated udev rules (#11)
- Remove empty %{_sbindir} from %install and %files section</changelog>
</package>
<package pkgid="b7078d6d6150de900c398eac9168057238fd844aaf32571b3e9e6694a88fa249" name="google-guest-oslogin" arch="aarch64">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="63d7b79dba0765c7d1ff49038ff4cafceff10c333aa3c78670c360d7bad19b96" name="google-guest-oslogin" arch="ppc64le">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="a26e5fde030f8584dfc662247dd2fd1acac75b7e3aa0cba11cb9396480443cc7" name="google-guest-oslogin" arch="s390x">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="5f933263c4c8f5958cabf41076a9d9f9c055b031148f1baa9b2493f9113e52c2" name="google-guest-oslogin" arch="src">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="4c7e9ea16f4ded03e2914d7440a33e651adabc3656f5c78528af6676cda2c4e5" name="google-guest-oslogin" arch="x86_64">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="2be18315d5cd3ebc94c2b36b1c80da68b982b91b2cbe8c9b90fe4485ca8ab9b7" name="google-osconfig-agent" arch="aarch64">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="72d62dc0252d83a16563bf986aca8c0d45aaaabb4f18355544b8089214f70067" name="google-osconfig-agent" arch="ppc64le">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="d5e3144d7d8a1d02439c6fce08e3075a293654fa906ca53c83ea735a1ee5316e" name="google-osconfig-agent" arch="s390x">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="de3b36557cd9a3f12f1189b4e0cb3868bdfe161bbb3cdb758e05e928dbe2409e" name="google-osconfig-agent" arch="src">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="c095c897b0ae4a9f013c48cadf8a9f2603e86269b0e9ab813bf3e68d75608ce3" name="google-osconfig-agent" arch="x86_64">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="2eb855cd316cbc474388634f2bbf391eabed27800c56aff49e0ae5c73712e62f" name="google-poppins-fonts" arch="noarch">
  <version epoch="0" ver="4.003" rel="6.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1611057600">- Create initial version 4.003</changelog>
  <changelog author="fcrozat@suse.com" date="1611144000">- Fix url to download archive.</changelog>
  <changelog author="fcrozat@suse.com" date="1611144001">- Fix copyright attribution and other cleaning on specfile.</changelog>
</package>
<package pkgid="85d0bbd006d179199547ffbac0c9c3f84534585610019161f685bc8a179b6cbb" name="google-poppins-fonts" arch="src">
  <version epoch="0" ver="4.003" rel="6.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1611057600">- Create initial version 4.003</changelog>
  <changelog author="fcrozat@suse.com" date="1611144000">- Fix url to download archive.</changelog>
  <changelog author="fcrozat@suse.com" date="1611144001">- Fix copyright attribution and other cleaning on specfile.</changelog>
</package>
<package pkgid="2af53dbf409e2a82de602a4584eacc5bb80d3ed4c05c105111f11be8dd92ff44" name="gpm" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="c5cf06976ca090aadd3a1910885d43f4d0e4b154efabac5fa59fdcc1127081c0" name="gpm" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="9c046131f880afa50c0dc9aa726a4fd979667408b91043c7cb63886fc5c95408" name="gpm" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="a434a9452d97d6031b4bda141997def0a45ab613ffd237aaeefcf1614f7148f5" name="gpm" arch="src">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1366113600">- Add software URL.
- Remove the patches tarball as upstream doesn't provide it anymore.</changelog>
  <changelog author="cfarrell@suse.com" date="1366632000">- license update: GPL-2.0+ and GPL-3.0+
  Scripts git-archive-tarbz2.sh and report_success.sh are GPL-3.0+ licensed</changelog>
  <changelog author="p.drouand@gmail.com" date="1382961600">- Add systemd support and drop sysvinit support
- Change pid directory for new standard one
- Fix suse-wrong-suse-capitalisation rpmlint warning</changelog>
  <changelog author="coolo@suse.com" date="1385985600">- don't buildrequire systemd, we just need the macros</changelog>
  <changelog author="jengelh@inai.de" date="1395835200">- Implement shlib packaging guidelines: new libgpm2 subpackage
- Add missing %pre scriptlet</changelog>
  <changelog author="dimstar@opensuse.org" date="1396699200">- Install gpm.service without executable bit. The service files are
  never 'started'. This silences a warning in journal:
  systemd[1]: Configuration file /usr/lib/systemd/system/gpm.service
  is marked executable. Please remove executable permission bits.
  Proceeding anyway</changelog>
  <changelog author="nadvornik@suse.com" date="1399982400">- install gpm.service with mode 644 (bnc#877455)</changelog>
  <changelog author="jsegitz@novell.com" date="1400673600">- added necessary macros for systemd files</changelog>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="5c609b63c29e5accd43e0c5c13d8014b9d5f41b0080248a9dcaf4fa718716e1c" name="gpm" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="dba181d17b4a6730d40ef09c86497479a8e51ca75fce0f09e6fb9492f96f69c8" name="gpm-devel" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="db39b6e05188a113da747cc7f71800366f6d9e540fdb93f24bad0a0a6eacebe8" name="gpm-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="845cc102182e0d2cc281b37b20c876a9f7b7438e2c3f953ff83d6cfa2684cb97" name="gpm-devel" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="40bdccab487c49a42a0d887053e0fb9211e7f8691e982decf511113c39b5f5ee" name="gpm-devel" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="433be3fa5d179eab06c0555d15db5b0c622f77c5eed5f7cd2cd10fd510c7a30c" name="grafana-status-panel" arch="noarch">
  <version epoch="0" ver="1.0.10" rel="3.5.1"/>
  <changelog author="jan.fajerski@suse.com" date="1550836800">- inital package</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575547200">- Change SUSE name in spec file</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="jan.fajerski@suse.com" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint
- remove duplicate files via fdupes</changelog>
  <changelog author="pseidensal@suse.com" date="1624017600">- Update plugin to version 1.0.10 to fix compatibilty issues with newer Grafana
  versions as the plugin stopped working on Grafana versions higher than
  v6.7.x.
  https://github.com/Vonage/Grafana_Status_panel/pull/161</changelog>
</package>
<package pkgid="e7a58da07179fb4a28e9c8f863ccf9ee60a81e2bdbcddf833dcdc56a215499be" name="grafana-status-panel" arch="src">
  <version epoch="0" ver="1.0.10" rel="3.5.1"/>
  <changelog author="jan.fajerski@suse.com" date="1550836800">- inital package</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575547200">- Change SUSE name in spec file</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="jan.fajerski@suse.com" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint
- remove duplicate files via fdupes</changelog>
  <changelog author="pseidensal@suse.com" date="1624017600">- Update plugin to version 1.0.10 to fix compatibilty issues with newer Grafana
  versions as the plugin stopped working on Grafana versions higher than
  v6.7.x.
  https://github.com/Vonage/Grafana_Status_panel/pull/161</changelog>
</package>
<package pkgid="480f4db33347782a735e7f33064919060c2c505e3361bbbdfe704298074cf4f3" name="graphviz" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="5ea4257c127c47351282e615ca2b6049e4eb4cc8db90ee92f0234cea24af5a31" name="graphviz" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="5bd2650dfe9e6229f13a2cbfbe69c2366f807b4c0b00b990b492105d72c081bb" name="graphviz" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="0f317ef7fdae1ce0901637064814805c5147ddda6b2a0d6b54190cf49529cd2a" name="graphviz" arch="src">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="c4547d95846a11be5ea19b4a3a59b41abbf6817b2f4df34aaaa9277bfd8bdf57" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="97a607dbcfcbe9705914c0dc54d7c7ee3dba86ac5179b5eee6af1ad05f9e41b7" name="graphviz-addons" arch="src">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="matz@suse.de" date="1386763200">- graphviz-fix-includes.patch: Use #include "cgraph.h", not &lt;cgraph.h&gt;
  in graphviz/types.h.</changelog>
  <changelog author="pth@suse.de" date="1391515200">- Change license to EPL-1.0. Remove contrib/gprof2dot.awk as it
  contains a non-working uri.</changelog>
  <changelog author="pth@suse.de" date="1391515201">- Update to 2.36,0:
  (graphviz tracker lives at http://www.graphviz.org/mantisbt/my_view_page.php)
  Fixed bugs:
  * The xdot pad attribute is documented to have a default value of
    0.0555 (inches, equals 0002091:0000004 points).  However when no
    pad attribute was specified, xdot output behaved as though the
    default was 0 (graphviz tracker 2372).
  * Graphviz gave incorrect svg when labels contained HTML entities
    (graphviz tracker 2384).
  * Building gvedit failed with undefined references (graphviz
    tracker 2388).
  * Document that edge[style=tapered] does not support colorList and
    that edge[style=tapered] does not work with arrowType:none
    (graphviz tracker 2391).
  * Use a stronger test for orthogonal routing and, if it fails, revert
    to line segments for edges (graphviz tracker 2393).
  * Fix xdot background polygon coordinates being "nan" with no nodes
    (graphviz tracker 2393).
  * Circo couldn't rescale a graph using the mindist attribute
    (graphviz tracker 2395).
  - Remove old libgraph sources from distributions.
  - Move master git repo to github.com
  September 15, 2013
  - Add &lt;S&gt; element for strike-through to HTML-like labels.
  - This version also fixes the security bugs reported in january.</changelog>
  <changelog author="pth@suse.de" date="1400846400">- Update to 2.38.0. Changes since 2.36.0:
  - Resolve bugs: 2409, 2413, 2417, 2420, 2422, 2423, 2425
  - Enable packing for dot
  - Allow scaling to work for all non-dot layouts
  - Add overline text characteristic.
  - Fix bugs in gvpr and gv.cpp so edges can be created in subgraphs.
  - Add edgepaint program for coloring edges to make them easier to
    tell apart.
  - Modify neato to avoid unnecessary translations of output. This
    allows positions given on input to remain the same on output.
  - Fix swig java package to work and support gv.renderresult.
  - Fix test for the absence of layout (old test relied on statically
    allocated Agraphinfo_t).
  - HTML-like tables and cells can now specify which borders should be drawn.
  - The fixedsize attribute now takes the value "shape" which allows
    labels much larger than the node shape.
- Remove graphviz-fix-includes.patch as the fix has been done
  upstream.
- Add graphviz-array_overflow.patch to fix an off-by-one error.</changelog>
  <changelog author="pth@suse.de" date="1400846401">- Fix URL to point to the new location of the sources.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Remove upstream-included patch graphviz-ppc64le_lib64_support.patch
  from graphviz-plugins.spec</changelog>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="916a07dd618604a005c5615ab5b02998e557533fb4694142286803c66f7f2e53" name="graphviz-devel" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="c213fcfaf3366b0dfdeab2cd834f0f2c6049c1ac8519354a745481a906efb18f" name="graphviz-devel" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="bd267e84db01aacbdc4861d620bc29423ed1029e89d51835116ca32f3787affd" name="graphviz-devel" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="2d3cbe1463733d85887a8b968cc5d9169af006c4b173598adc6400745e141c1a" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="f119a8f1e1c6e8e200cdfb06be8ca3ddabbd41a4d1d61957516614f1cb98772c" name="graphviz-doc" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="d0baf26fc90765249aea0db157cd42c57e482757a1578170a74e2488274f48bc" name="graphviz-doc" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="95ad5ce270ddd2dd611bd1ed342f0a5daf20cd9147088ea6bd5e6eba93daa93f" name="graphviz-doc" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="606d206db63368fa5a1beefab333d087b8037ee65014403dfd1bbe2329d270ca" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="3548565a299abdc0ed434f9bd536b2419b1dd912c0821e4ed213b0b0287bc818" name="graphviz-gd" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="087c4ad4ae9abd8c1bad70a409238f66ab2e7a2afdbbea284951e1e3199ffcf7" name="graphviz-gd" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="dedb5530c0bbca336eea777f793761ccae3ee2acecdf183b56819ba9e56720fa" name="graphviz-gd" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="bc9a4929cad2ca1140a89b5fd14693faed1e7e9b37e4a0f51b103223970a7a8d" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="1dda50e0fb473a9dc8c95996dcbaa1f52861a75b49f6e3e6c1551641ca0263c8" name="graphviz-gnome" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b8a022e5011d7801907e0f30836259137aff034606e2da31c6ec4b59861c2b8a" name="graphviz-gnome" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="2e8539f1ec9c0f87347c31f560cad5087534ed91362d979d30fd7d3efefc64a7" name="graphviz-gnome" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="08b96773351a06dc6d9906677332aaf1074dde449939faa7e6aca0cf617724a0" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="83c4a06f28487fab4a4f6e862a41cbc06d651bf4a77416ce370cfdd6c1d220fd" name="graphviz-guile" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="60b338eab8d40205416efd45839f139b146debe181ecfcdda3109ca06da89d96" name="graphviz-guile" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="0ce30d260ae99b10619a26bacbacdf79b423ee3ebd2618f39a39c03af1d98206" name="graphviz-guile" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="d68ccf1b71fa1c8315055b89128f24bf99de72313c08b0f3dd41a97232031b9d" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4e3a0f380582a43c8fdc78e00ef7fdf5a8eb39958f3a5777f643c0d19dc83782" name="graphviz-gvedit" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="54189d6c5afd09e50b96a813c03883113c6170e0b8a0252d9b5fea814b746756" name="graphviz-gvedit" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="a309b0c49b15be3368e84415ae7b4443a9ca7339997ce187be6cad3a6f8ca705" name="graphviz-gvedit" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="2621d6b00678b1454692098ca5d94702f7b1686fc237e3854acdd08381813d8f" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="95b18fa9ec0d74410f98ee4b48f2a7881bb93985faddc4c3f8290c261597f5d9" name="graphviz-java" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="e81150147bca94d1587851c5e0ec7396c8839b2265894eca0b6c2ae0ed2773bf" name="graphviz-java" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="9b62ed2775cbb6912676f3fdf31ebed1069106b854c45ba89a27c857bfe82917" name="graphviz-java" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="f48917babf020e8bc9c526c44675290d7aad46cb46f4aabfadc370696010ac38" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="c79684b419761f4a74d461531e27d2d7cb6bb24104dbd80f6c05a0bc498277d1" name="graphviz-lua" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="a1f513a5a78cc4d290f5d74d02f410d28b94ac4d515b9974c1de8514d3f50453" name="graphviz-lua" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="2f10e4e478361f95f826ca5eb5d736018f0ed94fbbd496cf60c2f62198914b84" name="graphviz-lua" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4a6fa6374d07a523b4e53f1b87319dcda54e3921e3a0e2777c0c23136e69a1b2" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="9ef1c260eee97895587ef963f7d75cc8e03265ad7ed817199c59cdd01d20da61" name="graphviz-perl" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="e5d0acea702e0290aee50d7b7dd96cc63a45f2cc089e137de80a3ccbbee02224" name="graphviz-perl" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4eb120db044e5a9ceaa77082d7d513857c51b241b4f9d619d7accf99ad2ee863" name="graphviz-perl" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="14b7baaa1a24643bc6a746907b2a44b3fda1eaaf901cb680208521c8ced4c326" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="36758276cfef8e78fba29399e2afb01357755ce9a68a320ad5c39b0cc42be6f4" name="graphviz-php" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="abe4eaa892c7c964ab5673c24860ce6c98eac09f647244db7ec85eafdbaa0a5a" name="graphviz-php" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="6aa9200d211bbbcc2814b74d872d3a4db5f036eb82a139db51e760e6b74e32d9" name="graphviz-php" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="309e2946e67f7559ea14dbde32440065de8c50a9da9e9d376cf8648d9e04a84a" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="348df5e6338aa443fa936319ac977ef1ebe82e665bcc9fca3105c8eaee88b8a0" name="graphviz-plugins-core" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="db00f48124cae9566b8c170210a4f41e3528ee28e35ab550d4b8cca215ef2e5b" name="graphviz-plugins-core" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="9a3c0588a6c53fd7666f2a4fed3a67a47a8234a41a0d4ec99b67edd123c730c1" name="graphviz-plugins-core" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="db2b597b7b0225cef0939fb3d69e0e0d970bfc2f7d6c074fa94b095a038eff3f" name="graphviz-plugins-core" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="083587ebb2aaff10aca1febf861370212029d439566c5e642db52c7517aa9efb" name="graphviz-python" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="90caf873f6ae055b9b378361ee2d087f2179e6205348370476e58273e5d79100" name="graphviz-python" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b71c891c8d102af354fad327c6546a20a0f5d5e1e1f39d964a816e983f7c2e7f" name="graphviz-python" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5423c25131841cfa27e32e7b5fa0efccbafa6df6e5ff25ff155640238f954e97" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="412b5eca27348a574928056b6347dfbabaef37965a06adc7e3dc2550298e0f49" name="graphviz-ruby" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="01e7ca179e428e79b98af82997064bc0b517556d9d9886744739e7823afaf4d5" name="graphviz-ruby" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="f503063bb855d889112094206e478fd231d811e524db23cf8523dd7f992b3185" name="graphviz-ruby" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="6bdc9eb710129fe6ccbf61b923429a5164e75546f3824b7f65317084e3dcfba9" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="0d515ecaa630f900a67e2e95256a5325733b4e95356aa31398d2362d1743f060" name="graphviz-smyrna" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="61607a06d2eb257febc9a9485c4d582a6289c5256e944deb4398376104e6114c" name="graphviz-smyrna" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="485c3774c74108a9eec84c98b9e4763d8d85f5da08015d446153afec28779faa" name="graphviz-smyrna" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="99a1e2d2544bd9b597c3345b0c3e9a475780ef7fd50ddef9e5f34e987884a77c" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="da4364d7bc9e4e4a0e1929aa5a2987c3b7d771c309da82729a6ece71d52f19c8" name="graphviz-tcl" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5d0ed96f950f8feebdf713c37e6f53645dba730277d6eeaa8c6e719fb4b30472" name="graphviz-tcl" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b238c22fc53e8415ad8c66066b5e29dfb039fa38dd8a9476fe0ca8cba021b447" name="graphviz-tcl" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="1876a437a7bb214c875ce58071c9b181d09fef642a48bf449b147c4d366aac31" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b6aebad3f1fc5cdf3cf92b9b9e148b43d0a5cc121fbe4d3a69d7425b78ffc302" name="gstreamer" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="41ab79203d6f43515a976d08436d51b57a2b2a5a7f7a1fb6779d3a9e9d2dd740" name="gstreamer" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="2b23b8d8190bdd45a8d6ed19be534f429eb9410691a228c2b3729795460b555d" name="gstreamer" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="89e133d7d2d9cd55583efc2aeebdea372a995e70f06ef47865ab15fa5c53b968" name="gstreamer" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6ba4e77d427fe604c76ad6811431195090d345e79ded96e59dd6ebc7c8d96096" name="gstreamer" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="8e05f39f50266a021125ca9df98af1ebc9f1581146298862d4ac3b6c5e8af639" name="gstreamer-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6364d728d86dbca271d8b3fde1d5d076f04263709f6a4a4f9614dc21b188a5cd" name="gstreamer-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="76d274e17458b0ab46e80241599029e7cacee90cd95356a6c394b674f9bb50be" name="gstreamer-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="b08ca98f9a984a35083e5ebc03c10dbf2272baff838879b4d567c0ae73cb9318" name="gstreamer-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="4b7bd468c09fbc98400ffd223fd2ef3ce2af9b14d41f19f86a96cbbc5a09bf19" name="gstreamer-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="c9b695cd2eb833a4af1e7b95661425abaa9a6a0d455a69fb08c9af86e11dfe69" name="gstreamer-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0c8400638fdfd415f4d80135ff2bdab1a3e190668bd9425f60a1a87c890f9e2a" name="gstreamer-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="45eb50e8946f1d33d32ddf82bfba6b4fbbd34aa2e16aa992ec1626365f8e05dd" name="gstreamer-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="29d84a3cb9cbb9c78e805766e2a31e46f3cee4aa5f66e03bac2812884eee4298" name="gstreamer-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6ddc32b500466dcc765e2f7beed45c1ae4b5d60acfc3139f5af8005bbffb7249" name="gstreamer-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="c2e243bdede447e1a37b8ddeec42f0596b4cac758a611c2d8c4cbb6498969216" name="gstreamer-plugin-pipewire" arch="aarch64">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="06fd3211604c5bb69b55930f4ca8a0361078a7f659c8ed44df14775fd6e77cf3" name="gstreamer-plugin-pipewire" arch="ppc64le">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="8f235f11c679dfa7829fb8b7f0a977d0d9b20f731ca5123820a9cc0c8c62bcc7" name="gstreamer-plugin-pipewire" arch="s390x">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="c64561c33f13c0b3599b40d7b7976ee45a08a99d32f4d11f1b3b1639ab754de5" name="gstreamer-plugin-pipewire" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="4f2a519a675e4a003a16bfecabe422a918f15d3ddc2fb188c69f041547b710f3" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="410d358476850d4f65d048ff14b5466cdf92e3603bd1b65299fb0ce6c4348bba" name="gstreamer-plugins-base" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="05eef511208ee03753e6624ad5a61c4db5fae79bc35d35626cb09a337ffae8ce" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2d1953683de8c80c92e169d82759045839964cd4af8ae8ca4e4d1a737377beee" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0800d29a3b2ecc86e81bb7f76ef7554aa3067d108750b413a98ac7a3d13ce205" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fcfd1dc2cda5a5a595354f7ddb30ec667c0fc3aa7b4e8c631682b3658bf2d97b" name="gstreamer-plugins-base-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c1f8e7e582196edcb5b088a828dc1a71370996ca56e01597c47545b2d3483fc3" name="gstreamer-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="96355a57722ef06a753b961cc4fcd330e5c6f7d14e43f874507a79a01ae970a9" name="gstreamer-plugins-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2b5fb452b429387be6597c6cce7ad979e7aa4706bda50f1699652525bf92e4ff" name="gstreamer-plugins-base-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6df6bed602867dfd0afb090e879a874438320505e06ee5014e3ff08b3ef50ac5" name="gstreamer-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="344b0730e2338b4889ec745ca7e5ac839717bb1349af8fb33e0732d9050edadb" name="gstreamer-plugins-base-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1dcae63c6954f3b00ce1cfbd57cd6506aedbf8ae1fbf95d60e279d0a0f89de32" name="gstreamer-plugins-base-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="33631841d3ed6cc26f7d88efc418e9c59ca863b5f92ddb3c0046475d91b762f1" name="gstreamer-plugins-base-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1ff4f22d68a711b1a699c1f76efc9e03ca903edffaf7034f94f489a9ef5c150b" name="gstreamer-plugins-base-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="dd2022bead07345f456d93c95a50a8896565f8ded1585cbd05705afe1d841d12" name="gstreamer-plugins-base-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="46bed152248d7cfba7685071968e8304bc313f4b2c6a81b8d29ee6b168500f19" name="gstreamer-plugins-base-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c1f02b53c20a48258147c8b588be00efba2d63b52dc7e648dba88f1bb848efa8" name="gstreamer-plugins-good" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="5dae0aaf366d6c7049924f3051e306a5e18228817e7e06e9c8ebd6e8d40ea11e" name="gstreamer-plugins-good" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="712fa7dcc01606c7657a7c8fdf8e1999321ee2fef34a817718d6d30c5c971b33" name="gstreamer-plugins-good" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="bf9be3f25cc27c77cf238608cecd3b7a7d9c566bd463d9bf12a3e8824a73e960" name="gstreamer-plugins-good" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="661efd46f785ae9830cd834298d40c96f857d2f9ab467e16680c2ec367e5bd88" name="gstreamer-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="072211ac5c76890bef1cd61397af8da07a200deb5add8f3de8eb4090006b007f" name="gstreamer-plugins-good-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="86c478db4dd65753c2e1942f40aa3ae7693159c35b35e52fcd97dd6fd8ac3b54" name="gstreamer-plugins-good-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="1b28501a43b86ef7910be3ba5f2b41d8f755e2d9b7b732d057e6797c6fb6969e" name="gstreamer-plugins-good-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="401658ea78601504f12feda0d4a3d328dbc583aae2d3e5d847721a0e248ccaee" name="gstreamer-plugins-good-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="7b21369b41e8fa998b6a69c90904e6e718a406783240b26a7c7b5999ff0a758e" name="gstreamer-plugins-good-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="2124f1a531b408208e3336192cb9aac294d4ee635a94a1b8d8c91fa9294905a0" name="gstreamer-plugins-good-extra" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9dfe04810cf17c9fdaa7b37d18b0a44db5de730fa33b98a1c4a5989559846a96" name="gstreamer-plugins-good-extra" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="598bd2d61b83c327fbfbd69d8275e51f90c1ade03130d896fced12bfcfe57089" name="gstreamer-plugins-good-extra" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="f670288e20c41d27cde523588f745a18c501d4ba06eeb681ada65b2012c3f197" name="gstreamer-plugins-good-extra" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9845ac6aca3ee9948e27917c145ba0c151cdb864f05d4feaddb3ffa72871e2a7" name="gstreamer-plugins-good-extra-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="e6ceb9340118ce3a0cd3a8844f80c04184bb999fa0f7caecf69ff581d749c405" name="gstreamer-plugins-good-gtk" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="2612670f6c11b8bcc5f110f38e79798c2812a89eb22841fcf9554d26917738ba" name="gstreamer-plugins-good-gtk" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="e37b842716d0ae047c8384b1b692d01f8a78e6289d6d2afea095a84b56b4e6e9" name="gstreamer-plugins-good-gtk" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="ab55c206afbd0018aa1993c823a3aac6884654f81497a143fedf2997b2f37f88" name="gstreamer-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="c67df775ce008a83cc0ba9b0e2fc00d9f9aa2f150ec413d39c6677cebb8d3806" name="gstreamer-plugins-good-jack" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="dbe2a88d062103eb929994349eff12f02588c30a92d97f2e42ea4283f82a2cd4" name="gstreamer-plugins-good-jack" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="14e6efef7306fb83ae34686192b5b912f2df1357f1c7e2fc9bf6a297b28500ce" name="gstreamer-plugins-good-jack" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="84c72ce662a7d14828e1a956431f83fd4575ebe5fb296b8d22a988ddc9404646" name="gstreamer-plugins-good-jack" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9420d6af5c32283b81ee5703a0267d3655551845de6c9adf606643368141b5f6" name="gstreamer-plugins-good-jack-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="57f2470200fa2c9d3b65a692e32337c7a44dbcbd376e4447eec26ed3e7984eda" name="gstreamer-plugins-good-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="5c1594283fa12e218d8660c5ea279c965910ce6f30ec7a38a79c539623ca1fbc" name="gstreamer-plugins-good-qtqml" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="42242b243c92701e25c345b17d8a66e660212773a8a630a2c879d8d72f241fdd" name="gstreamer-plugins-good-qtqml" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="07e9bb80391a2644c60eccfea6e6d9006af4a91a6d92d8709d883d26b4274d35" name="gstreamer-plugins-good-qtqml" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="081d1d1c6db5890b9a9e8e1b92905c50b8519f4f76b06f4f4d7edb8094fbca1a" name="gstreamer-plugins-good-qtqml" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.
- Split out jack plugin into new sub-package jack, also add it to
  baselibs.conf.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792775, bgo#793067, bgo#792376, bgo#792644,
    bgo#791473, bgo#757449, bgo#791494.
- Drop upstream fixed patches:
  + gst-good-equalizer-fix-Wincompatible-pointer-types-warning.patch.
  + gst-good-fix-memory-leak-GAP-buffers.patch.
  + gst-good-flacdec-flush-flac-decoder.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + Mesa-libGLESv3-devel and Mesa-libGLESv2-devel, libmp3lame-devel
    and gstreamer-gl-1.0, gtk+-wayland-3.0, libmpg123 and twolame
    pkgconfig modules as build time dependencies.
  + pkgconfig(x11) BuildRequires to avoid implicit dependencies.
  + Gtk, MPG123, lame and TwoLame plugins moved from
    gstreamer-plugins-bad/ugly, following upstream changes.
  + gstreamer-plugins-ugly Conflicts, ensure we do not have
    clashing files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526299200">- Split out gtk plugin in own sub-package.
- Add conditional ENABLE_EXPERIMENTAL define and set to 0, we do
  not want to build experimental plugins by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527768000">- Add pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5Qml),
  pkgconfig(Qt5Quick) and pkgconfig(Qt5WaylandClient)
  BuildRequires: Build qmlgl sink and package it in new qtqml
  sub-package.
- Add gstreamer-plugins-good-gtk Recommends to the main package,
  install it by default.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529668800">- Conditionalize pkgconfig(gtk+-wayland-3.0) BuildRequires: fix
  build for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532260800">- Update to version 1.14.2:
  + qmlgl: Fix conflicting declaration of type GLsync for
    non-android.
  + souphttpsrc: Protect input stream with lock.
  + splitmuxsrc: Make sure events are writable before setting their
    seqnum.
  + Various v4l2 fixes.
  + scaletempo: Mark as Audio in classification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="d968df0ee4a122a695a8c34dd03bebce77564f41dbc8745185d89eea0ea06007" name="gstreamer-plugins-ugly" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="5e9a46c5878cb525f5cf42788660119d2db1b6ee694f9cf24b2929af1b14b69f" name="gstreamer-plugins-ugly" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="36cfa3cb6adafbb2f8a25fae8c2519cd30de1a512e28c130aebbe829d8a4e600" name="gstreamer-plugins-ugly" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="5808790192281197ee8bbe94605a1285b0fbb8222bc8c367a1408ebe86102d9f" name="gstreamer-plugins-ugly" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="acd8359b396084bbd693b1a14318cbc222b110803b24a94462700bb7330ce3fd" name="gstreamer-plugins-ugly" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="db3f1680cdd6ec3dd1a24a5b6836d0f1d6ec3afd86710328ddf1b72da3b95bd2" name="gstreamer-plugins-ugly-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="289145b47ab4efe1b645b0308644cdf7c5d86f870611c2e623bec58bd35b9a5e" name="gstreamer-plugins-ugly-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="a2bdb4887a098cae926dc17739b1183f6098968c8778927bb12ff89b16c900aa" name="gstreamer-plugins-ugly-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="c53c35f5c78d55363db2e782879f0f3d25ed3ae568e8a132fa446708d462e686" name="gstreamer-plugins-ugly-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="71c82b802b269f6b2501f126a6520384f8619878e802e93e69d292f52aef1539" name="gstreamer-plugins-ugly-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="064ecc84ab2ae8ceeff902c2dafa4036774403f1c5716f3658fddca6f94bfe3a" name="gstreamer-plugins-ugly-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python-base BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512043200">- Add python3-xml BuildRequires as it is needed for xml support.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Bugs fixed: bgo#791301, bgo#788119, bgo#787817, bgo#787056,
    bgo#787014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1513252800">- Drop obsolete
  gst-plugins-ugly:%%{_libdir}/gstreamer-%%{gst_branch}/libgstmad.so
  Provides from orig-addon sub-package, no longer true nor needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516708800">- Add gst-ugly-amrnwbdec-fixes.patch: Fixes for amr plugins, only
  built on third party.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Move pkgconfig(libmpeg2) BuildRequires and resulting plugin out
  of conditional build, since it is now available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1519214400">- Run over with spec-cleaner
- Remove conditions around package definition, this makes
  source_validator happy as orig-addons are not built in openSUSE
  yet they are mentioned in baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522065600">- Add gst-x264enc-fix-build-x264-multiple-bit-depths.patch:
  x264enc: fix build with newer x264 with support for multiple bit
  depths (bgo#792111).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#792111.
- Drop gst-ugly-amrnwbdec-fixes.patch and
  gst-x264enc-fix-build-x264-multiple-bit-depths.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="d83832e4fb0b142458192ba8af05168324cbd3535eeb11612a48be8c5a633422" name="gstreamer-utils" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="3816ee8312a45b036588cb5429c74bc794c7929337ffe18c4d9291efe1645d1e" name="gstreamer-utils" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="421cd1805e368c3d31f697a85d0538a2c9e1a91834af8f4d8c584aad702f1733" name="gstreamer-utils" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0583ebda8ca94118d975bdbefebf1028b88d6fc79b5903d83e8168e3cfa352c9" name="gstreamer-utils" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6d0cf4c370ef647a87ce35ad226d74e61c1fcf46c22e64d930aeaed16a785b59" name="gupnp" arch="src">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="309476c79f410647485673f451a2a347e8188511cfea1405f4df5523d6f989ec" name="gzip" arch="aarch64">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="e73f750fa510ce7f6f828484a9f8331715403c27b9e376ff833970961a163dbd" name="gzip" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="eae0a1dad7cc9de5314dc7e4ff2d563e98ccad44cc6194aa7cb8c9ac8904750e" name="gzip" arch="s390x">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="d752e64d7d5efda666fe3e46fdee8a3aea422f68b45915c915804dee55bcbb3b" name="gzip" arch="src">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="3982e1ed00a10a3aa7d0ee02a7bbf8c075cf831f7f2049a6336d8f48c1a52077" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="6fb3f1617623a2a525fbe2faf33806c6f03af309ca0d519953d2adb8b7e60982" name="hexchat" arch="aarch64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="f16a62c16e3bcb208c50d1ceec348072622be6d57aef89564970291d09703a6e" name="hexchat" arch="ppc64le">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="7397d27bc89befd23d6ed06acd4a94927a648f2de3f92e033685e0669c309915" name="hexchat" arch="s390x">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="30eec215117da0318733fd3bded77457c91ff4c51515947d275becbbb47d4f14" name="hexchat" arch="src">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1380542400">- Do not put date into binary to avoid needless rebuilds.</changelog>
  <changelog author="tchvatal@suse.com" date="1400673600">- Cleanup with spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1402660800">- Version bump to 2.10.0:
  * fix SASL on InspIRCd networks
  * fix building on OpenBSD
  * fix crash when using invalid timestamps on Windows
  * fix Lag Meter reporting invalid numbers
  * fix drag and drop on User List/Channel Switcher
  * fix various Unicode issues on Windows
  * add fullscreen display mode
  * add /getbool command
  * add support for userhost-in-names capability
  * add ?command command line flag on Windows
  * add message parameter to /query
  * add help messages to user commands
  * add plugin_pref to Perl
  * add regex search to the Channel List on Windows
  * add option to hide nick change messages
  * redesign various settings windows (notably key bindings)
  * render colors and attributes in the Input Box and Topic Bar
  * bind middle-click to close tabs
  * build the GTK+ PixBuf theme engine on Windows
  * change /list to open the Channel List window
  * change the format key bindings are stored in (will convert automatically)
  * enable italics
  * rewrite /dns adding support for Windows and replacing the plugin
  * rebrand the Perl plugin
  * replace the Search window with a Search Bar
  * replace Text Box transparency with full window transparency (may come back)
  * remove all deprecated GTK+ usage
  * remove all direct use of X11, fixing XWayland support
  * hide unsupported channel modes from the Topic Bar
  * improve spell check (handle contractions)
  * improve rendering and selection in the Text Box
  * improve OS X integration (custom theme, app menu, dock icon, spell check, app bundle, key bindings)
  * improve the Windows installer (downloads requirements when ran)
  * update Visual Studio to 2013
  * update Perl to 5.20 on Windows
  * update Python to 3.4 on Windows
  * update OpenSSL on Windows to fix ?Heartbleed?
  * update translations
- Adapt few dependencies to match reality
- Update configure switches to comply with upstream
- Make the build verbose</changelog>
  <changelog author="mls@suse.de" date="1406030400">- when testing for perl, -lperl has to come last because of
  SUSE_ASNEEDED being set
  new patch: asneeded.diff</changelog>
  <changelog author="fcrozat@suse.com" date="1409227200">- Disable BuildRequires libntlm-devel on SLE12.</changelog>
  <changelog author="nemysis@gmx.ch" date="1410609600">- Version bump to 2.10.1
  * add configure check for python 3.4
  * improve spell check handling apostrophes
  * disable unsupported tray feature on Elementary OS
  * disable installing on Vista (would just crash on x64)
  * fix possible crash in banlist
  * fix some crashes in pluginpref API
  * fix crash in spell check
  * fix notify list being sent to wrong networks
  * fix scrolling the chanview on Unix
  * fix building plugin support on some platforms (OS X 10.8)
  * fix FiSHLiM decryption when identify-msg is enabled
  * fix expanding ~user on Unix
  * fix missing license files on Windows
  * fix silent installer on Windows
  * update translations
  * update network list
  * update Python versions on Windows</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="2a5abe1c8eb9ad32517947f618313e14a15fb7452a704f701a4c740ec9d8217b" name="hexchat" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="13525f372e36c23bea4581161e63716605dba17bfbf04463e488d27f65c4724e" name="hexchat-devel" arch="aarch64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="dedd53fa12172353c270b680dd0610f36e9b588614e8fb5d2dd3ce4ccc817c54" name="hexchat-devel" arch="ppc64le">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="c5c949d80f13adc31197977ebc6c63d9919d35cac2bc469657b71284ad5d408c" name="hexchat-devel" arch="s390x">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="f4423f21f3f14d80d3195eacefa3c197a004e7fe991fe00b14705291b4fe2d48" name="hexchat-devel" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="e21adc263b702313ed9fab2c0cd075bdee72e9bfed980d7d373fb4e369a596cc" name="hexchat-lang" arch="noarch">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="2375648179aa8eb458b9131528a411bcd34a60243592e6a7b5c6f55d7c8a74f0" name="hexchat-plugins-lua" arch="aarch64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="0a479d459ddd7c7621e08a0a112c8b4291674d4919b99d674b399eedc3baf9bd" name="hexchat-plugins-lua" arch="ppc64le">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="1887510e5972a0fdd01968abfbbb777192daee5f42daf3f2913c7d32049af29b" name="hexchat-plugins-lua" arch="s390x">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="170871714b0b9f15cbcc228197ce8c7f9b0053bf7498fccb60ea67bcc206a36c" name="hexchat-plugins-lua" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="7fc15148eb64e5d0d0a9d31d82c012eaabd1029e9a161bbff82b3558ee59948f" name="hexchat-plugins-perl" arch="aarch64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="a13b34e2c492baac35693dbaf7eac0d83714c9c3910ddc04e937a92d96198d09" name="hexchat-plugins-perl" arch="ppc64le">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="e2a879553a6070bb10098b8fbf56062a83b54ca0876c289e11af6f4345f5dc88" name="hexchat-plugins-perl" arch="s390x">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="4dbbc7fa8351144d09208cae854ad6f726b0fc4e51fa30cc054045c2edd7f643" name="hexchat-plugins-perl" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="9934c488b9bd6e348f59bed418604117a2a8bcbd5668cf4b00e8ee086fa6ec34" name="hexchat-plugins-python3" arch="aarch64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="aded58ad902927b24a9e4bad4498cde16dfe5eb0ad942153f9147d55db850848" name="hexchat-plugins-python3" arch="ppc64le">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="6a824c0f833b772c465b463aa8fc6b7584f5c861280479f8942464a9353193c2" name="hexchat-plugins-python3" arch="s390x">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="533f86d2f5198c9595794ffdf6e18ef1a3ae246c68f5d2e1bc7626717a100c58" name="hexchat-plugins-python3" arch="x86_64">
  <version epoch="0" ver="2.12.4" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1421323200">- Version bump to 2.10.2:
  * verify hostnames of certificates
  * use more secure openssl options (No SSLv2/3)
  * detect utf8 urls in chat
  * fix using multiple client certs at the same time
  * fix checking for Perl on some distros
  * fix friends list not properly updating
  * fix building with format-security
  * fix more non-ascii path issues on Windows
  * fix opening utf8 urls on Windows and OSX
  * update deps on Windows
  * update translations
- Remove the asneeded.diff as it seems not to be needed, builds without
  and perl is linked well.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1456228800">- Change URL
- Remove BuildRequires for fdupes, not need for it
- Use check for openSUSE %if 0%{?suse_version}
- Add BuildRequires for hicolor-icon-theme
- Add BuildRoot for older openSUSE versions
- Use %{name} instead of hexchat</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- As we build only on sle12+ and no non-suse distro the conditionals
  from previous commit do not make much sense</changelog>
  <changelog author="tchvatal@suse.com" date="1458561601">- Version update to 2.12.0:
  * add support for IRCv3.2
  * add cap 3.2
  * add sasl 3.2
  * add chghost
  * add cap-notify
  * add support for twitch.tv/membership cap
  * add support for SNI (Server Name Indication)
  * add ability to do DnD reordering in some settings dialogs
  * add option to disable middle-click closing tabs
  * rewrite sysinfo plugin
  * change formatting, unified across platforms
  * fix handling unsupported CPU arch on unix
  * rewrite identd plugin
  * add ability to change port
  * fix handling multiple connections
  * fix threading issues
  * rewrite checksum plugin
  * fix support for very large files
  * remove openssl dependency
  * remove DH-{AES,BLOWFISH} mechanisms (insecure)
  * remove ?IRC? encoding, replaced with UTF-8
  * remove ?System Default? encoding, replaced with UTF-8
  * remove configure option to disable ipv6
  * remove msproxy and socks5 library support (unused)
  * change tab-complete to favor other user nicks over own
  * change url detection to support unicode
  * change decoding to not attempt ISO-8859-1 fixing corruption
  * change pluginpref to escape values
  * change installer on Windows to not overwrite gtkrc file
  * fix numerous crashes (but not #600)
  * fix crash on printing very long lines
  * fix crash on failing to open log file
  * fix crash when using unsorted userlist
  * fix crash when timestamp format set to nothing
  * fix crash when tab-completeing long strings
  * fix crash with long values in pluginpref API
  * fix various other unsafe string handling throughout
  * fix poor performance with nick indent enabled
  * fix fishlim plugin handling networks with server-time
  * fix logging hostname of users in new queries
  * fix Key Press event sending non-UTF-8 text to plugins
  * fix VERSION response on windows 10
  * fix get_info(?win_ptr?) from python
  * fix running portable-mode from another directory
  * fix duplicate timestamps on selection
  * fix ?cfgdir argument
  * fix mode-button text being cut off
  * fix scrollback timestamps with server-time
  * fix url handler accepting quoted paths with spaces
  * fix using correct encoding when jumping networks
  * improve DCC handling large files
  * improve python detection in configure
  * improve scrollback file handling (corruption, line endings)
  * improve build options on unix to be more secure
  * update translations
  * update network list
- Use python3 not python2
  * Add patch hexchat-python3.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459857600">- Provide/Obsolete xchat to ensure those that do not have patterns
  containing hexchat to migrate to it.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1460980800">- Remove non existent configure --enable-minimal-flags and --enable-ntlm</changelog>
  <changelog author="tyang@suse.com" date="1462449600">- Add migrate-configuration-from-xchat.patch
  Fate#318480:replace xchat with hexchat,automaticly migrate
  settings from xchat:
  http://hexchat.readthedocs.io/en/latest/faq.html#how-do-i-migrate-my-settings-from-xchat</changelog>
  <changelog author="tyang@suse.com" date="1469707200">- Modified migrate-configuration-from-xchat.patch.
  To realize the migration of servlist.conf file.(bnc#989961)</changelog>
  <changelog author="tyang@suse.com" date="1473076800">- Modified migrate-configuration-from-xchat.patch
  Add hexchat-migrate-sh
  Realizing the migration job with shell script(bnc#989961)</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 2.12.3:
  * various small bugfixes in the 2.12 series
  * Add LUA scripting support
- Drop patch hexchat-python3.patch</changelog>
  <changelog author="tingping@fedoraproject.org" date="1479211200">- Update dep versions to match actual requirement
- Remove unused build deps
- Remove no longer needed __DATE__ workaround</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Add dependency on iso-codes and hwdata as hexchat tries to use
  them (boo#1034310)</changelog>
  <changelog author="astieger@suse.com" date="1499083200">- hexchat 2.12.4:
  * fix issue with timers causing ping timeouts
  * fix building against OpenSSL 1.1
  * fix /exec output printing invalid utf8
  * replace doat plugin with an internal command
  * change how tab colors interact with plugins
- verify source signature</changelog>
  <changelog author="meissner@suse.com" date="1624363200">- feature-add-libera-chat.patch: added Libera chat to servers (bsc#1187587)</changelog>
</package>
<package pkgid="4d6118a085ed45863182fe9ac112a22d980f62879c993c986743375f7d7837e9" name="hivex" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="880aea5886b5965879be0af465e54cfd23cb1bab301de9be79cd1a904b3544dd" name="hivex" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="d0d57b56e25639426c6f0fc78831b3ca68deb90aad828e86727f5f248b51574b" name="hivex" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="71e30f35dfffa585759533ad3cc14aac1923a19e28da08bdb668e554ab19832d" name="hivex" arch="src">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="mhrusecky@suse.cz" date="1317124800">- initial hivex package (version 1.3.1)</changelog>
  <changelog author="ohering@suse.de" date="1341230400">- workaround buggy python detection by adding python to BuildRequires
- fix filelist to build on sles11</changelog>
  <changelog author="ohering@suse.de" date="1341316800">- update to version 1.3.6</changelog>
  <changelog author="ohering@suse.de" date="1346500800">- enable perl bindings, package them in perl-Win-Hivex</changelog>
  <changelog author="ohering@suse.de" date="1346500801">- move python bindings to python-hivex</changelog>
  <changelog author="ohering@suse.de" date="1352289600">- update to version 1.3.7</changelog>
  <changelog author="ohering@suse.de" date="1361707200">- BuildRequire: perl-macros only in sles11 builds to fix build in 11.4</changelog>
  <changelog author="ohering@suse.de" date="1375272000">- update to version 1.3.8</changelog>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="9643fd5776a36171eb468630b037c3c0c8110b21a9f4ae8b6c1ff3af912930d4" name="hivex" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="bbec3f45eb8b62cf5c9821d71783d78640ba4d008e08c9cb74a53cee48f5009e" name="hivex-devel" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="6c8d3a48d6a7e0b2451e6d00884e91c00d6294eba35a76b170bb453e1dfb0be1" name="hivex-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="0816152d4782aa0a802a71166410428ce44b4096852693fbada22506da5d1563" name="hivex-devel" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="7fe0a8ab797a603d5d73e45ffa743c82b0b55191f347aa85a603be1ad6313c3c" name="hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="9d8941b7031992fdf776077f2014e08e160fccfa2100db86eb6c06f722b8bb3b" name="hivex-lang" arch="noarch">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="eb5b38637fd26e5dce33c2079ed733e9ba3dbd0bca73f0f0f0e873e4a37acaec" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.347" rel="3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1575288000">- Update to version 0.330:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1578398400">- Update to version 0.331:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1580731200">- Update to version 0.332:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1583236800">- Update to version 0.333:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1586260800">- Update to version 0.334 (bsc#1168806):
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1587556800">- Fix previous changelog entries</changelog>
  <changelog author="mpluskal@suse.com" date="1588766400">- Update to version 0.335:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="dimstar@opensuse.org" date="1591099200">- Update to version 0.336:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1594900800">- Update to version 0.337:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1597147200">- Update to version 0.338:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1600084800">- Update to version 0.339:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1602158400">- Update to version 0.340:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 0.341:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1607342400">- Update to version 0.342:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1609934400">- Update to version 0.343:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1610020800">- Add merge-pciids.pl to fully duplicate behavior of pciutils-ids
  * Resolves SLE issue bsc#1180422 bsc#1180482</changelog>
  <changelog author="mpluskal@suse.com" date="1612267200">- Update to version 0.344:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1614600000">- Update to version 0.345:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="c264d8682ff2e546c801a362b09f4539119221217ad09abb7d9a0a2e78958dd7" name="hwdata" arch="src">
  <version epoch="0" ver="0.347" rel="3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1575288000">- Update to version 0.330:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1578398400">- Update to version 0.331:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1580731200">- Update to version 0.332:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1583236800">- Update to version 0.333:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1586260800">- Update to version 0.334 (bsc#1168806):
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1587556800">- Fix previous changelog entries</changelog>
  <changelog author="mpluskal@suse.com" date="1588766400">- Update to version 0.335:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="dimstar@opensuse.org" date="1591099200">- Update to version 0.336:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1594900800">- Update to version 0.337:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1597147200">- Update to version 0.338:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1600084800">- Update to version 0.339:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1602158400">- Update to version 0.340:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 0.341:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1607342400">- Update to version 0.342:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1609934400">- Update to version 0.343:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1610020800">- Add merge-pciids.pl to fully duplicate behavior of pciutils-ids
  * Resolves SLE issue bsc#1180422 bsc#1180482</changelog>
  <changelog author="mpluskal@suse.com" date="1612267200">- Update to version 0.344:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1614600000">- Update to version 0.345:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="620fbaa00c63d437b42e3e2597f191ec1cc7424bfc7c339b5b4b60bd7e7cf8b0" name="ipmitool" arch="aarch64">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493380800">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="e93280b485a9e2466e15677084930ecd18dd978e498ed78615ef05f105ead029" name="ipmitool" arch="ppc64le">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493380800">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="280e9889e2024c039b0bf68c8da394760b3c6bc15904c3bb52a7a2165c78d1c1" name="ipmitool" arch="s390x">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493380800">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="3bb1180458d92d921d19d79f083d53f02e67757fe5e65dc90fed576acaa8b7be" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1394107200">- Update to latest git head and do not split up version 1.8.13.tar.bz2 tarball
  and patch to latest git HEAD.
  Reason is that all files in the repository got moved up one directory level
  by git commit:
  c18ec02f3304ce2a889a50e378f07a4168af3884
  Date:   Wed Feb 5 17:30:32 2014
  Move all files one level up in the file hierarchy, to avoid the useless
  ipmitool directory.
  We want the latest git head asap, because otherwise additionally needed
  patches will never patch cleanly in mainline and our repo and would always
  need adjusting.
  I asked for a new version tag mainline. As soon this happened, the
  tarball name should again match with the exact mainline git tag.
  Remove/Delete:
  ipmitool_update_to_git_head_31_01_2014_b0aad15d67007c74b.patch
- Incorporate patch on request from Dell: fate#315996
  Add: 0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493380800">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="3d66c9aaf297f3663f240ca400c27106271c249fdf3296cd0f67311b73f0758b" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493380800">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="af60e4f647091fb994197c7cc26af2315b7466c82d5eba95bb8cfb2a87254a5d" name="ipmitool-bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1421323200">- Update to latest ipmitool sources.
  This is version 1.8.15 (git tag: IPMITOOL_1_8_15) plus mainline patches up
  to commit 708be8bc450f907cddb6d9e4b83aee6ba67b7d04
  Date:   Fri Jan 9 12:48:35 2015 +0100
  * Add: latest_compile_fixes.patch
  * Add: ipmitool-1_8_15_HEAD.patch
  * Remove: automake-1.13.patch
  * Remove: sdradd_close_file_handle.patch
  * Remove: ipmitool-1.8.10-implicit-fortify-decl.patch</changelog>
  <changelog author="trenn@suse.de" date="1426075200">- Add correct exit code on Dell specific commands which did not get mainline
  yet (bnc#886184)
  * Add patch: fix_dell_oem_exitcode</changelog>
  <changelog author="trenn@suse.de" date="1444824000">- Update to latest ipmitool source code
  commit 999cd0ad9192b19ec57574e7aca111571f4d21d8
  Date:   Fri Mar 6 09:03:05 2015 -0600
  and throw away patches that went mainline.
  * Remove: fix_dell_oem_exitcode</changelog>
  <changelog author="ro@suse.de" date="1456315200">- do not use systemd macros for non-systemd distributions</changelog>
  <changelog author="trenn@suse.de" date="1456401600">- Update to latest ipmitool source code
  commit 9020b67347f46554009591ae91e4fa8875c65dfa
  Date:   Tue Jan 12 21:16:37 2016 +0500
- Fix memleak: bnc#968105
  Add: ipmitool-sol_memleak.patch</changelog>
  <changelog author="trenn@suse.de" date="1462276800">- Update to latest version: 1.8.17
  D    ipmitool-1.8.10-implicit-fortify-decl.patch
  D    ipmitool-1_8_16_HEAD.patch
  D    latest_compile_fixes.patch
  D    ipmitool-sol_memleak.patch
  D    ipmitool-1_8_15_HEAD.patch
- Remove whitespace changes from:
  M    0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1485345600">- Update to latest version: 1.8.18 (fate#321579)
  D	0001-Incorporate-upstream-comments-to-289-add-whitespace.patch</changelog>
  <changelog author="trenn@suse.de" date="1490702400">- Update to latest git HEAD version adding quite some fixes (fate#321578)
  * Add:
  0001-fix-typo.patch
  0002-added-microTCA-major-version.patch
  0003-replaced-removed-defines-which-are-already-present-i.patch
  0004-fix-typo.patch
  0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  0009-Add-bootstrap-support-for-Mac.patch
  0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch</changelog>
  <changelog author="trenn@suse.de" date="1493380800">- Lower prio of message from error to debug (bsc#948540)
  A hpm_x_compatibility_msg_is_debug_only.patch</changelog>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="0204f467307b7f9b081ed7624776c8dba648b3a85e9a55c942cd21385a1db93e" name="java-1_8_0-openj9" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="d60c157c475ef447492b2958b39585724ba63365e16d0c63bd70bab2fb2f0456" name="java-1_8_0-openj9" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="f949d1dcbe6e49b26dcb424d46abaf30ce7595302156c3845fe3fdf38bd5539f" name="java-1_8_0-openj9" arch="src">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="66ee6802721a5914f3179f9a9b124ad77fd34c056d1ea332215b143db0d6e963" name="java-1_8_0-openj9" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="885d241e3b1be84fcfa6dda31af6591ebfbc6ec514d992acf82f074d7f2a9aaa" name="java-1_8_0-openj9-accessibility" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="910713256ad4f42bb30f2f683afca5db44c0701b03921f6a208b32faa390346d" name="java-1_8_0-openj9-accessibility" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="0427c3bb29942447cd7e64a990dab636a8d9b6d6074eafc55d15eb1de8b1bf90" name="java-1_8_0-openj9-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="3da86d175655790b5dd0717d6a7374a6f57c06dc9110c4127c6b4039b39c720a" name="java-1_8_0-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="1dd07cd739fd6090fc77755aab25b71d0d33ce5be1381c778c1975d1f4bc5abd" name="java-1_8_0-openj9-demo" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="4bdf15eb332c9df5ed10dd03233d2c280aab508149e931c041765c5b8a1b9359" name="java-1_8_0-openj9-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="58c4fe5ee3169fe37d41eb5aaf490ab6912a9504c85fa374f4242cc71d2ce347" name="java-1_8_0-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="9e29b158bc05476dddb98ef1c12a314c57be49e70fca290a52442a016fa3df09" name="java-1_8_0-openj9-devel" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="4e96e7983bb39f3e6a76d0bc0eb06ffc813a3cc62efa7aa49168d60f789d1c6c" name="java-1_8_0-openj9-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="65549ef8dc49e38c065689cf75f0b69e9747aecaf09a6f9948fbb3375f149281" name="java-1_8_0-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="09395d2bc93165faef4014848c506b1caf118db4a4cbd3f88f2c511f218bb49b" name="java-1_8_0-openj9-headless" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="1ad0603492375d6281f2e75616e2ccddc49d04ab6aa8d550c391ba83edf73ee7" name="java-1_8_0-openj9-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="e893421bf6409f9bacfb9ee33a29b3c2f7356e3fcb4f25468fd2c201e1fcc45b" name="java-1_8_0-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="ff6d9eb05ea4cab91874c42b55f19fdda7b902c805dae2f91b9cf4af4e86f0b1" name="java-1_8_0-openj9-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="e4ee3a98a2efd3f543c51ad542962f3756c1344da3c53264557b4469702f5cdf" name="java-1_8_0-openj9-src" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="cc725cca886b5b2ca108177d5406deb3a91a6a607d2bcb005f444a3fc15d0a41" name="java-1_8_0-openj9-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="17562256498918e188093a7bd7c53557c8707719f10954bea5a670b6dd5a5595" name="java-1_8_0-openjdk" arch="aarch64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="515a0964c9ada9199c28f852aca6199a8055fac6d8ea98610b8810ccf49dd4e0" name="java-1_8_0-openjdk" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="d365291607acf7df6a4132a1831efe75011acaf2ca8bdc4e0c20d2e945f7682b" name="java-1_8_0-openjdk" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="26c1ca0513fc755fa5a2e4b4f3a9ccf17fede1c183d315808e94b8787053ebae" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="8b8cf36173f71ca99b08ff9eaf39aac57299f5de1b24516f0309cde43376fe01" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="916c7355dd733cbbd49bbfefd096a59fc986568064c8ee54ab29fa095fd7cd27" name="java-1_8_0-openjdk-accessibility" arch="aarch64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="29c7138ef83b4773c0edcf121ccefc10dcb39b1542c230c9003134fbb31b2843" name="java-1_8_0-openjdk-accessibility" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="01bfc717a67e174a491cce5408236c37ea0f81d2746c540e867886ec90eeb02a" name="java-1_8_0-openjdk-accessibility" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="6cfb08a1ce8604351b869e225a3c1071fe02eeaed04f5694dfe21e2dcfa3fff2" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="3d87afdbef0e67870fe42726aa1255a10ce292cee9b484770dad1ebc0274b1a0" name="java-1_8_0-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="f435b55556c6fbef24f71eee611993e1eee42abd58949ef7651f233cad1c2ce4" name="java-1_8_0-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="3f3620508c32a600e7013da91ad390be4174ef889fc30ce8eb5940d86ce72c56" name="java-1_8_0-openjdk-demo" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="22da1c030e7a01d5563924afd0f9ef1934c797ab5ae01e7e4925a95c406c6ca9" name="java-1_8_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="12e252e63a824ae13b4709b41d31b13c923aead0ae20b32e1ce49724c2938cb7" name="java-1_8_0-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="a4545e65dc7c331ca660b0c24c03e33289bb92a5f38da47abe60edc6a6d449c5" name="java-1_8_0-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="00405852ab8b663c71e900cd268496209302597cbd45e7a0a01fc449ca61a826" name="java-1_8_0-openjdk-devel" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="dba8f5c04f2bada94ff70937041746b2e1efa2943e0da527725ca1895fea8840" name="java-1_8_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="a886c6b6363886392ce13d13d8faa90b30e4992f3594b314ea103b41d20dec40" name="java-1_8_0-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="a7277658cc8b5979cc0e6a6257ac2a34aa99fb56dbd4b74e6e6f20ddbdeddf27" name="java-1_8_0-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="aeb57397066894ead7093aa2306fee7ed54a5600f4360877a65506d8e58b947d" name="java-1_8_0-openjdk-headless" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="6254aeb1efcad5b35f438ad3e9162c5d6cc62bf935994f9545d26d196de04e77" name="java-1_8_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="8fb1a2d35c38cde2094772f1e30899d9ac6624c9c0feeed245bf9a7e8fc4c643" name="java-1_8_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="78b1592773aa6e5fbf87585d4eef61f7847435cb129e9fc1966e42a3d074675c" name="java-1_8_0-openjdk-src" arch="aarch64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="b0c94b5ff67ca08960e9d88923526ff7fcbad45dbcfd8c183e8fc35761adc0f7" name="java-1_8_0-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="18851cadbbbd35eb58e505ab6cfcea02595b677615d5b1924a0ca2174dbdcbb9" name="java-1_8_0-openjdk-src" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="b934c32e190c814fb49ab225b484846d90c067bfe58d4e69ba55765febc878da" name="java-1_8_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.52.1"/>
  <changelog author="fstrba@suse.com" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="fstrba@suse.com" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="fstrba@suse.com" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="fstrba@suse.com" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="fstrba@suse.com" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="fstrba@suse.com" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="jcejka@suse.com" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="fstrba@suse.com" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="fstrba@suse.com" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="fstrba@suse.com" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
</package>
<package pkgid="1656e1a1b59ea410fccb8d31b4b938ff01dfa3d36b4f135f1ce56a0f463d39cf" name="jdom2" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="3.3.1"/>
  <changelog author="fstrba@suse.com" date="1549713600">- Initial packaging of jdom2 version 2.0.6</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Trim filler wording from description.</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Remove unnecessary dependency on log4j</changelog>
  <changelog author="pmonreal@suse.com" date="1623931200">- Security fix: [bsc#1187446, CVE-2021-33813]
  * XXE issue in SAXBuilder can cause a denial of service via
    a crafted HTTP request
- Add jdom2-CVE-2021-33813.patch</changelog>
</package>
<package pkgid="2279a284607223001af1c6d02c519cee7f3721fa2c789a3c31d78648cc76a636" name="jdom2" arch="src">
  <version epoch="0" ver="2.0.6" rel="3.3.1"/>
  <changelog author="fstrba@suse.com" date="1549713600">- Initial packaging of jdom2 version 2.0.6</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Trim filler wording from description.</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Remove unnecessary dependency on log4j</changelog>
  <changelog author="pmonreal@suse.com" date="1623931200">- Security fix: [bsc#1187446, CVE-2021-33813]
  * XXE issue in SAXBuilder can cause a denial of service via
    a crafted HTTP request
- Add jdom2-CVE-2021-33813.patch</changelog>
</package>
<package pkgid="56a1b8ac9e6f83eb9a2b9faf8e4e7d7d82053cc342c745211c1ec28f775e8311" name="jdom2-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="3.3.1"/>
  <changelog author="fstrba@suse.com" date="1549713600">- Initial packaging of jdom2 version 2.0.6</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Trim filler wording from description.</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Remove unnecessary dependency on log4j</changelog>
  <changelog author="pmonreal@suse.com" date="1623931200">- Security fix: [bsc#1187446, CVE-2021-33813]
  * XXE issue in SAXBuilder can cause a denial of service via
    a crafted HTTP request
- Add jdom2-CVE-2021-33813.patch</changelog>
</package>
<package pkgid="a4479ee35dd158275cb765738e38ec5a72b5d210a2e793240d6726e5f399a9a7" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="48230f88d047fda86d9263c8fa37f3de79dbc3b6a299e5e5e462c302d4db40f6" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="73420abebc13a87a6dc24be20af493697c10670c4b30a537aaeecee2a9d5ca40" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="d0d732337ea60d00a0583a72b0c86e62a09f81ac41a1d982ecef4730788ecca3" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="43d895ab224f11283aa984d4d6a51912b86b35ece4d3776546cb640017a7956e" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="8f6771463deb3ebd72c5a41757d6aaabcc837cc429adf70b24f89e2ca970f0d1" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="f847f27367f1a526d5aadf696a9ea8cbaeb3ca5a7378e5c736a7355d58116d00" name="jetty-javax-websocket-client-impl" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="d15929f93674ccc92bae5457105a833961bb8d4a498faa9477afae2601b8bfe9" name="jetty-javax-websocket-server-impl" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="bf956224c1b260643c8453e00bb83fbf13c73d694c44243e40c9ac5f28d8ea17" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="1448da80c4fbffbad0cc69a5bdfbd40f03bfeab7bac98cef0f76726218b1c964" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="5f26249b492f13618c1bae7f2b85eff7e9084c0bee227eeacfa151f2f38bf1ca" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="c4eeff02d81deb4edc355b78322dab3a827a7a4a287975b3d9c90edf7a86e4bf" name="jetty-minimal" arch="src">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="a487c310bdece5b303fe81a60b342a766c67a4d2225f3cc097f464fd82507bb2" name="jetty-minimal-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="f73a0ab69b12c12d31dbea242434b26361a977c5c31a31a98a32733f52da60ac" name="jetty-openid" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="cfc3da6016180e77456f4a14008bd3598849473de55c3159037ded2fc41fcefb" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="1837a9e04831bbb455e682ac35498a60d30c5a62dc7663ab55253fc457d034cb" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="a86b8c09d926f601cd11995431c5400b481583779a798a40547913c348a6a1eb" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="e27b9e32c958c00610cf9aba99ae0c9b20b1991b797130370213312a97337f10" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="445cd01b91c60902ac35b2fc6ad0edc8a95c926a806a8b1482b268a803a8561c" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="1ec3eeb30da1e31b2732b6a33803a02488787cf843571975c173f374bcce47c3" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="bb90a25d38f41ced4606b1645614f8b7c7d32e429a800fa69647daffdbe57209" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="3ee46c00ab0fcae15aa29e3fa48c54489eacc1c2b2dd503526478cbeef7d917c" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="e2b179716a34df37f8baeb16859026108fb5d848b7418774262759ccae0d4535" name="jetty-websocket" arch="src">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="f5bd255449496030026b755b6a4cf25825b092f37c36d644417af71bb272b44a" name="jetty-websocket-api" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="86847f389545463414a6f2e38be2e05dca7d2431587c3abfc4c47fe91cd5c272" name="jetty-websocket-client" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="1fbb2a68b033047ff9b7fb69a847de46c8a7ac3ed875a98087635d450358473a" name="jetty-websocket-common" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="5f5f088b4dc4c8c359027058340e8bd8066d7727a25fe87b75c5192c416f005d" name="jetty-websocket-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="f1e434c9226740b96549f3191e910912da324a140c6fb359a1fb0129c0aaa3d7" name="jetty-websocket-server" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="cc5805e9def15f03eb3d6d93334e6dd4a660c2aeed3faeccae12b5b0ac256e7d" name="jetty-websocket-servlet" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of the websocket submodules of jetty
  9.4.22.v20191022</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan
  * Improve handling of unconsumed content
  * Jetty start.jar always reports jetty.tag.version as master
  * HttpConnection.getBytesIn() incorrect for requests with chunked
    content
  * SslConnection compacting</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="ed711bf7c75561af057c73058a4fdeccd2257d50e6a17b08778da2830f5563bb" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.42" rel="3.9.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
</package>
<package pkgid="85d024fb429ef9d2d6fd72b61b5f9c0e48cc72e1d02a05b36f959c38d2519adf" name="kernel-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="837bca4705d33cabd048f33be3ad79b5d1dbe99acdd7e216c821db1f8ac8bf87" name="kernel-64kb" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="4800120728295d9b90e46baae2547193c5b71e9ffb7afa7fb07271b35c7402ed" name="kernel-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="248fc4e565743dea3a748d6ed50ee5d0fd88be9b59f64020bbd4ed760ca331e8" name="kernel-64kb" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="49a7780dc78a9d684004b3a2221830708f30358052877f4d253e40839fa1c2f9" name="kernel-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="14c6ac25b167ebc65bd206d937fd507629c9440305b04b80b27c0c5131e47d12" name="kernel-64kb" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="47b5460e55735d4bddbfa32c0faa4a0a6c6dd78137ba3982d455300952781c1f" name="kernel-64kb-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="95d3c6af873cf4119074ab6d51c26a22f4e75d662e1bcf24855207741c802cac" name="kernel-64kb-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="a828068d322cc33aca78ff8f00d097303cc1ce78c51bd85175974b1e50d9eaf8" name="kernel-64kb-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="039259cf8c07ae42dcea2a75dae403681a56b865263f61aeb31276d2492d4056" name="kernel-64kb-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c3f10db1030c2b1d142372751815d6e4745ae4e45e64c0bc72597b5b1f023a72" name="kernel-64kb-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="8ce99dd072bd598054fc38a4606b9c933bbfc102e8657fe871e0b6498409b612" name="kernel-64kb-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="7f33dda8c467528949c8ef180df913aea45ad0fd2a2a8bdfa908c62e5b433170" name="kernel-64kb-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="cd4e5f758c182f6ce80d1bd7ccf1c31982805d2e3501a67336971f9c3486a49e" name="kernel-64kb-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="2f4ca0b18563c0a370eccd75db4c1b4e6a0aa668e51196e7126af31a7307f545" name="kernel-64kb-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="8b864391dabe1c52bfc3323622f78ccbd9a4cb8a0d90db41523dae403c0abbad" name="kernel-64kb-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="13a9d5835c0d3781a479f907f8f24c85c0d9d78e555e2b5cbe9c6c39c1665b45" name="kernel-64kb-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5b6354167ef8608ee7ac7f72525d779085ec062a8688d3405c59c858acc4d611" name="kernel-64kb-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c8394f8d3b6d01bc063d55a37c53c0bc001aedddda11852f553312a8f9eec4d8" name="kernel-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="793a89c4e85671feb29c1f9aca0df64a0c92d9a18551b867a93f11f124af2927" name="kernel-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="c5c1a6934fe8976d935668ae8b53c0a676c0e5ce8d8f82ade896f34bf773c22d" name="kernel-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0e4aa07b59aac5598c007b74ff3a3da55dd6af21a61f51bd478bf7774c44814e" name="kernel-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="4113cbf22b32639d0bc7ec63727f41a6d6191e92501604f8903d703c40946595" name="kernel-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="f036fb5a864c2f6a38376e57e0f8e6f52538246b970dcf199dd909407653b724" name="kernel-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="a1216d85d063d9ef8257ae4e249f622318541dae1af41fa15776c3e534dd7ddf" name="kernel-azure-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="73f04caec91baa5375c4bb24867f012689fc0ebd3c5c909866245d0c59780aa0" name="kernel-azure-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="97055a81ef5f7a9f5d18bc836458228c5baac15de96c16092eb1648eefcdc6b0" name="kernel-azure-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="ea3d22532603ce5d46f80a3c792de377590b97a004ae7c3dba15037eefaadbc2" name="kernel-azure-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="0d829b1db0699f87a2fced8fb361914eeb4e06ae2c1ed4077b6534d38b4b31db" name="kernel-azure-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="f31e4d7bdc9fefc0a0ab0ad16c0e1fac8a16ccd954290cfe1e0954c96095479b" name="kernel-azure-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="7c54dcc88395e777fd08df26d7e586ca963e5087365a30c34a056c692d1111bc" name="kernel-azure-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="242bc1dce539a769680f689a6d6a06b7236970f3be40eeb2b77fcb10c2e41867" name="kernel-azure-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="20991de57deca8385ab2873b3bce94ea44d085e3441b7293d529f8ae94295c7f" name="kernel-azure-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="6def4f65164fde978da0586f5647fb7c22bb837308578d1af51bbf60853ed491" name="kernel-azure-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="4b4e387ea889dbe525e03cc3d1c1d9827a0e27ad945ecd285c5b41d9cc4d6f84" name="kernel-azure-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="8193a249c105c16abc8b989ee23ebe357cac53ac0e9dfd329633bd0ff4f67cc9" name="kernel-azure-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="66216f29173f12ec263bd566dbbe0c4fce8e1b6e1e2b77d1778ec44d19d5d551" name="kernel-debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="1a59b02100b38e250dc574ba3d8616a2bd3d592cf8ba6a7d2010aeb7c3c5aa94" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="8fb726ed4f6b355b047ba78e5c1b0ac80d8835facf776dd3a87e2963ba27a943" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c0a7b7d2becd67756e77e505177d92f0ff2331f79996a3c2adad3cda16890abc" name="kernel-debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="34726db9615a8c3037a8c37a6aeeac14b5606ff8c069925fd0fd331c37b057d7" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="02641a61f02867ebbe73bf9a900f4ac4376deb4ca0354298c7a46ce42029a410" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="32f8d13468eda930722636afe7a898879a7b2ed6fdd50f314aeda147368d2949" name="kernel-debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="e498b4a4390e11354ecd97a8911dcbb308b6d8c7ba4ddef5241658dd18fa9c65" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0cebcd29fd74530851dfd5bc2c51fdf4654cb929d526add1f573690257d3287f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="b84ddd4de7124d634e6da063784d64e9f54fd1b2b073bae865714c7772e79f34" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="ecd8adde34ff6d4688ce58475d6d97aabfd6fd00e9cd34591eeddcbb5271a28d" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="f9e3c29f6e6a7a25c52f3c8c7664f2b12662dfe03605393990f819e31d14a249" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="57db71d27693a36a1f8ddf7235b65285e4f414efed42ba1665d367c7d3128e8f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5c1552272e5079ff7b692ef28d3464b3f602f942932815a6928b7f579a119b71" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="f6a0b4ca329fd6c32decfdc6785d0066bdbc2ded912d7f1899be7ceb789d5e8f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="8e202f24c365e40837c93cae6e0631f04d4b1cbc14267bab35ae97185fb46307" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c1606885d8a56e21c59495041246a1f2fce0d503750d669204bfbbffe5075f53" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="8a03e11ba149524124920109e67113123fef6520e295d5e11070c6dc698d5dbd" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="73989a1d272116cd5898faf0c2c3dd67d0cd9376a200f287225de7e0d0a761e5" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="d6a83324ae6009686fce8bcb136939e50a1795b0aecd28642d6244220b8e7339" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c7e3facc16bf82e363c58fabfb9112f4b87c77241182238365fe88c2a9d2f66a" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="18146e8f68770940eedb779d22bb9e8ad306be2c5e06a80dbf19b5bcc7240cca" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="8fb376e2cfa1290978992e519ef52d501a85b281e352a47d8daa864dbff7c9cf" name="kernel-default" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="18ec89a80edb7c186e53f4cf31381a5ddcc1826b406a5913039280f862a08173" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="99caf0dbeee47a68964b3feb6c58b0ebb15c571faf673b205f53397e0eed3001" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="18ccf0c35bbc9ea8555c2b7c718b98c844656013ea139ed64eb94a7baefe7b95" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="fce76dcbceec33ee2894ae9efcde91adc3e390a1a46594e1219cfe87513c4574" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="e36f87e077c6b8e63a9e79ef66fd0e39c994a30b3a01bed0a44af1a2bf84b81a" name="kernel-default" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="88f1a1531d9922b24682077cdcf45c3d4f66ed68fcf8141535ecbac75f38ba01" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="486cd8ae3558833d20f76b47f5035d320ad3e505c47dfe540b349d6afa9e06d8" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="aa07f1991bc7c419a7938a2fa9e3da335b188a83868678e8fdc16c3632444c31" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="6fd87012efc3bb4f93d8a4b56056c18b81d9ed5096d404de0cfc95e0e803d06c" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="70410757489b2e1720e3bbe0aa149392d3fbd08dcc1cc8e4d240a8dfa0756c1a" name="kernel-default" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="8ea035cca11ce71cb17a608504f7302d38aadd0ca7e1325fb345998550e1a5af" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="3fc9f41e96cb8eee3a7c35dfa19b02d6f4db8356dcd90f23f7646ea316af516c" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="3bc51d4e62db0cf611b1d3126dd67b5fbcaaf22df3d753be0bc2561f57f88afb" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="488d88b13b16a3310349604b0f44b07774b3d3177ac5847ebd5821860eacd421" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="b9a80c8af0e6c993435d1e998043840f804af389782a0533c3b5d085316c6555" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="fcc6d2aaddc4091c6be4ed9b755849a3cc447e19958e825e4fc30e1b243648c1" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="ee2e8ae5b37144448a064c6f9fd2be15deea694fbccb4b12f35d0507ef03c7ae" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="2283a7d5b2adda33f8a46acb42b53146d3d3f372387502dd676e7ded88334c79" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="40695ab3b17ce51d26257e870c84c4d3c3f35ec569b797de3e05075074591a4a" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="fd0bdb46d2a46a9c45089b0aa6b9a38dfff7980075b887c6e47420da594a0bfd" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="03a662859dd003af717168b5d200846e21aed8e5b02f8fef7df6e63715a15a3b" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="e93182e69a420d154c1061f276cd01391efc3bb7ed444de49bd404e103211809" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="f7e1c26577578dc01192a1e10a362e430fb11503045326d764f6f0f52172ba25" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="7fa3807a649b5ec77a0f21e99ba8238de488bf02ac92b7d2891e4575fbaa21dc" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="e0659447b6c27bc4c630cea8ecb1bd98f1aeec160c68eba356d56835fcff85d3" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="2be031b0ff54f7111ebefe01b6d86dfb1047b8e71fff5f8cb66f0c2433c7c954" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="ccbd491455955cb2c1c70a1f243336dfc404c49098ab7aaa001c8c9e2dd600e7" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="9bb64dee6609f67cb2828c92d1f9f482e608b43009a6689cc2a8821afd5f8e2a" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="102606cca3e666d630c72f7c26323a28defaf478de69955dcf0edf8cb33ab208" name="kernel-default-base-rebuild" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="bd83a23d14a402088a8a738908e4926f9aebe59d3d8fdb88d6548dec31482771" name="kernel-default-base-rebuild" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="2cf34d7b4661a4a962696515f8be52327a4ffc22cbe78af19357299e5bc9ba28" name="kernel-default-base-rebuild" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="d74b395dfd63f835d8f030832a11c05938943967b3934447440327a2f5c2d83a" name="kernel-default-base-rebuild" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1.18.4.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="540b960d73d25476d8e9c3930891e650a7405bb2a66ee1945ba62e2e0176e360" name="kernel-default-base-rebuild" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="e832c853f4c87f02695adbdcf8f1ec4a40ee1e5222f8d763e818274c37edef4b" name="kernel-default-base-rebuild" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="32f657eb2cbbf2f355b85dd1aa545d7940d3e200802da70156ea40628a818f79" name="kernel-default-base-rebuild" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="00ac44f22600d180c6303fa4f8a24b7e4453a32b7136accbc038eab21d30d182" name="kernel-default-base-rebuild" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1.18.6.1"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="aaa52db6de2bacfa521a3cfaba6045c790ee59733a387a12c243b59a23a3293c" name="kernel-default-base-rebuild" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="3478ee24977a63a1cde56ed00182884b2ef8aadc20e4c22aef54d5230978fa89" name="kernel-default-base-rebuild" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="f32a32162d6feb5a2bb8491e80a8f6d7a38d97931b6789e52c12fe76e0ea0487" name="kernel-default-base-rebuild" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="c27c92552776f818ebeea89ba6d314216cf144776954337eccf06938ddfdd77c" name="kernel-default-base-rebuild" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2.18.2.2"/>
  <changelog author="msuchanek@suse.de" date="1554379200">- Add dw_mmc-bluefield driver (bsc#1118752)</changelog>
  <changelog author="msuchanek@suse.de" date="1554984000">- dw_mmc-bluefield is not needed in kernel-default-base (bsc#1131574).</changelog>
  <changelog author="fvogt@suse.com" date="1564142400">- Add all netfilter and xfrm modules (boo#1142841)</changelog>
  <changelog author="msuchanek@suse.de" date="1565265600">- Shorten module list by using wildcards.</changelog>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="d1df01fb63d1d81d651fb6e3d60ae7bca1b2c58dcfd20c1add854eacb7c1046e" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="07dd6171b1ed0180c86aabc6df9d79ca7982059d2bbff094cfecf926d1a3dda1" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="04ff9beca30df569492b39370ee8cd6b71a147ed41ab0c9fa901a5fb913750c1" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="0b61611e87bb03e51f68004d9c2b61ca1e5ac28c4de23354ea7a45ce5e4d113d" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="18082a087a79ba2012ebd2bf5b2f0471ad48065d20d3ed22c9d9a7d226caa23c" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="74eff91076f880015b23e3c54e006a60bd18aa3e9d3aadb3d0af8e64ed93d521" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="75b68291e1a6f158b042a286662f6ebc1f69c97873bb2b073103f70e6a0d670b" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="7c86929f15d9e29676c6adb3e29438b6ccbfe4d172246d8697eaebcd8a5971a8" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5d5087845a450872764ef1889b047a471e933abf878a397b417b57a3a61ea263" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="cdf12db0dca94c40c75905cb84d130dc708a14150ae8bc42d5c709d3cd373ff8" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="95a4097bdca7956791f781594df383fd84603ca266f8a1c05907ec35b0f0f2cc" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="a81319bec32b2f804455f289e1085ab3467b75554bde4c31cd4d9d098b3caff0" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="e3a931d4892599353d64d5025c17c3b8ef7f22dea44640051311aa80d9ae6c68" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="fe83114718e496c63e95959dc5020ae1ae0aadb8dff2a24d761ce31c152e1ec3" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="e8fd4bd3724640f48452a7f6c63c28ae0e66b96f323a25f3f63925963e0cf130" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="528ab2e35a4a01e3ddbc10b881712564e25ac3d85e547fc96ab3cd8714d679d2" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="ba581662e803ce507cf8fcdeb7399c199b4914879c43a804c37250c29d4d7258" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="e428b104cc8bbd99d9285c50bf1bbf0e14b80b895376f7bf80c43e3ea324cdb0" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="0077d5c8db1087437988043b9af3334efb08055a802cb715673f203bfd1a68d9" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="9acf6b68ebc08798046d8cf71e2fa60278851a8a2f11030e3c6e9d9113fe1cca" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="33f2929f270828bfc3dc43e46d222bb08e3b1cccc8984a9441e03fde1f3bdfe5" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="58707648f36a21cd5067a4217f111341842f8e799675820f7bdff8de6f172a06" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="bac25f46938252e0812ddab98efb231ade85cee78b18cc2534a180c7d1b8cbf0" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="498db5bbe6486d0f093c80f60ecab8a7c5aea94652552cfc4f1987ad17e10287" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="477c2d0b10bba1f4f3103a57a87811ff3fe6dc7b7ff169c3e9affbc55d051e8b" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d7332ba331baea77a099fdbad5e5b84cc3ec0edae2774c8356a1eeb6b89d24f0" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="7edde813a609b4a2e94fe508d4b968d4ec1982105cb55a373f44bbb83a19018d" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="86f42f978b6a0f52d12de6d000338a4abcb8135cf63dad2c9a32d3ec12492b63" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d4bfb29e3d604d49fa2d44e5a4bec68934cb6afdb833ceb943acaacc9ad2ba1d" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="4351ca0a09baaeeeeae6980df5e9228be8ab2f1658f807dd23991a05ebbb54bd" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="fc717c1d11500a4b084a9f905626dfe61dd48ae690766dc9024ef1fb6b76cb38" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="969d9b6c0bf7fee949d5fea25ff5e3b7d9c5dd99ec2b96d9539ae50851620f24" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="810dd28b3b0c3b97e414f67f7f15e198312dd06f36d455dc0d2f254655526eb4" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c8d50d8dbb47ee1e1a6847b9a47725261d3290a815a7c1825969dcb5a47e66ea" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="38f953dd43de36ea9d3df39bf9d59767137cd6e34522175682a3e12055e212a7" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="3700adc849ea76fcd2d8aac6849160a7f78c87229d2a1ff82b241a4281c96d4a" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="90d1f683f01ad9f0f7891d2813cc088905c7773a838e4b87a2fe2f736102644e" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="ce23bd8c1a226ff4281c58e1c20d2ff1784b6e4a26fd0e7effdd6648dc260d40" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="7c329ced6293355176cccb95c5a225d2fb0f76c9305a40ce927e643c3f55182d" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="a9e759f946ced35f404d348a68f57d3cb0b568a97034947f5cc1c8ff44a066d5" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="688d851c4da85289694994bf1321309179c8297aa8078de06959f42edeabbb3d" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="f4c5f5ee5accfe7b46ccaccc47ca575877e8d5c746fca6a1dba584e8518ac01c" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="4f028351c4b1b37a4145c9dc29e4e94c78c7ac7d6e4026ef09cd7143ace177ee" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5535966f562aa14cb4992d0a9ba3522e84ff474ee6ce57f36359bff9a7498e64" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="815b097ab44d8ff41799c03d45a7c34b428397d04ad633153d1cc8c52c061e4c" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="ed3d6666d18ab71b62f3543fe1ae15dacb237555ff279b027023eb41d761dfec" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="4a53356b22a9b8233a6b7fbcfecc29b457d431e895f249f9ca27025ecccf3da6" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="46779b47dcb05808095134560e4388efc368b630411efc00e754cc56f2cab013" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="b1d0b9a7ff3c123caa3db88593854cc925e8bba2e141c9d5af888dc945000f67" name="kernel-default-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="fdb509d87d516285cfd1250e76180ffd7b574b73d5c70477002447d06e508da3" name="kernel-default-optional" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="e2b2019b760b790cf511b82e46c612aacec2d85589ee2da0b3b898a84cb998f4" name="kernel-default-optional" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="4c48b0ef624c78302c645a76c5b95ccd3dc4da50f575cb009f93f7f0e2d966f4" name="kernel-default-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d7a7f54f780edf1a213f34ae803a7dd4634e6db42fac3504e6acf3119612fbd6" name="kernel-default-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="f0110c0e409b75153ddfc80b4129ba5e760af5bc5dc64e7862dce9827342774e" name="kernel-default-optional" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c762b21f8a0f5210cd8b0977aa3c0cd0300d9a2ff76da37c997477d981aa1a5d" name="kernel-default-optional" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c69bcbaf804e89800593c18914e98ecaf6336548c54daea05ebd957564bb04d8" name="kernel-default-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="7d6efada83c02670625037a6e9578c65c71d81e1fda878648813a03b55637834" name="kernel-default-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="a1be1381fb14519e6e4090743d54dd97b8b8657b96761bca7b848099d83929d0" name="kernel-default-optional" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="75c0b9aa5369ae95f953d393c7ff46006ff16c662c16cdf35c7903c99c8575e3" name="kernel-default-optional" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="3b2be69f7d40bad3b93e871e605a13da3d5ee9ed88eff22cf287867f6bbee3c5" name="kernel-default-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="5138b2745b33b4b2a6235a3234de6e009c9f385c4e23a2cc40d119c2eaa07ba6" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="a4eee4c67a2fbfbf14d45d3c36e49155b9c20e43c501d8f8a12068c59f54075f" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="a9c76a7747a74be4dd12331bd4e47f4244dcd8a62920dd1283985c53d99c0978" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="709bf5052369bb6d9a15aff127ed1f8b22c91ca0ba0afc5bc98c9ac569d4b543" name="kernel-devel-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="098ceb1cecc3769f8fb2cba57e24700a534b4c8fed388dad09c144304781731f" name="kernel-devel-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="ff1b6e06b2b382f766e2d00d090a5b5d88880abbb732d5f229241121a82b8d9e" name="kernel-devel-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="7f8b0b9bff91edb0066b35dd3d6fac01a537438d32e775b5ed7f801c3bfc9363" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="492a84dfad9825521ba3ee7a580af035257e2b2b77037443c9ef651be9037e34" name="kernel-docs" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="84fc198b1b4033fee5748b05ab9586b912c309328ecb077898dfff67b7cc1300" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="2f55850f52eaaa888f153982ea10461a18b324f3c82d5dc2704584c7672d6e00" name="kernel-docs" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="bf371542675aaf9c7cd36ea105cffc42b01a5ad4d27a891db316c318c6bc5f35" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="5e6eacd2c9465593db5919ec3fd70cc1a56c5276cee86dd9bd8c90015c2d3e30" name="kernel-docs" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="d574c2ac2be18505a193024df653ef00e820ed7604d71e1392c23c23078b7c91" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c0786bde7d66cd17bd023c8b12b0f52f68ab7202d3ef1e8669eacd95cb99f420" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="06239b0e5bc157c5810f15c5afe3ff91fcc2db1f79994f715602889fdd29a262" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="2feca6d46b378c92cea1fe0c1aff62d209babe42cd3eb053187cc25a6818827b" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="2fb1eb80707611ec26e13e4656c66fbd153413a7600f2b4ef5b4835b910fc156" name="kernel-kvmsmall" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="a4eca154fc23311635a658bb5ce6149bc060629a4270e875a458cf55b6effd1f" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="25fd5b4090707013cb95cb305750cf937c1be956272473e7d599a037cc9c0391" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="b4a449e12c126ec798eb77ee302e957a891f0174f6750a42c9f748a78446d80e" name="kernel-kvmsmall" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="4cdd6ffbc7542299f2c8ec31bcb9579c305c4c879619781a9782aee51c792213" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="dba1313d50f03a65d0c2cfe11d141d8ef024533521035ab234ca7b6c7259d9b9" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="41ce13cab6625b6e985baa32284292750b86fb4ef5e19c4284f3e02900c51570" name="kernel-kvmsmall" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="26c92eebdaad7fada773fd7b187211465877b59876dcfaafd04d1df3698da522" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0ba0eec3773cb524906f92a3100e611ab271e7189eae78ddb6f1320840fe16fc" name="kernel-kvmsmall-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="23084527345c86aabb1235d458cb61d58d456d7240964e49b8079272919643f8" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="013633a291a453fbaa8b2469f13d7fdf2f0fceec858f73317d7f1e84106756c9" name="kernel-kvmsmall-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="16762944e9dcefe1c434a571b3f0ec1ae63373524d417c94dc6cc2958ac01582" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="53c7d8d40fda9267e34e5970689148226165b7cb57e36557469209a181e48d2e" name="kernel-kvmsmall-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="afd05bf6d5ced278a2d82ee9a278a5112852331ca8b062a904ec53a0e69eecad" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="98613ea71612b9a70305332c679b7af2b71dd993efcf779e18f2897180f79b06" name="kernel-kvmsmall-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="1a33533e475ffa0ce73420a2e0307db3aadf268d5c746e0cbdd22ee0831d8d9f" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="7bc464d5e03139e5a47ffae6841e6589497c8d27b5239f848cd0a646bf0ce86b" name="kernel-kvmsmall-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="8dd95803443c41adea65bb6e65b40321afc063cfe8a6e4cb7260b48187e93b33" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="dc41af57b95d068eae26f33f0c23ee5e73e35892f126582c09e0eb210b9ac6ee" name="kernel-kvmsmall-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0c72c6188ae56beb264e7b22651165404c541cd687bd8e57c471d6a0f5c56947" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="1bcadd14337f9a716e7d81890421d17ac0eb068f9ddac07ce0bb2badb88a5634" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="97d8e514a0dd476dd3507d32c3001d9845e20a05e4e96c9809b629eedc2db528" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c151164e58d8d6c81499802f0e8f0121455b763dd8edb282432df2f8d87b800b" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="b0fc0e28381d2f78f951a815f64943c96efcc323428c0b37636d01aa91d77af0" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c3f5d03a908f42f6a2a4a98c844117dfe38ff7b6c3b70cfe18f9f36aaeca6f7b" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="0ba65061681302d95a816f917a714dd3057fe7699214b402e50b3607a46a4a86" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="03caaeac994852451c07c79ac842307d8b17dbc34b53ea7aa81259f421057a57" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="b51a2c7d79e5c298568738c17d4840f89bb72dbdf5776c6c7124e1aab3a57b82" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="4449a46267dd101d353de437db1f8cf9681995c849cc9dc4e220385fd4835f30" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="56b615b9c65a9d771306606ca40215cf1d48ec6d9acebfcd4a3d84272c94b3d9" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="ec6a84badac6fb9f3e752e3dd9e83fce260aea370be4960db3f1234c1138b815" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="cbb1276b27c97f904484d1e32ce1979efce013d92017881a8b0cba3e6f69d3d1" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="49da3d5009c6a6940f9ed362096b8e0a53f4a84b76eee71d36756149546ec313" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c98b3195ed3fc1fc6558e110f3d31976ac5a58dc41a8a4537c4cd6fb864b93de" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="22c1cf06da06ba73d4fb3fedd45373e2e1223ce7ca912b82d2cb7e1a8e2cd853" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="a1c5527c7cc43fb88b869b101405ed7faa5eb7d9ad1503cd78f4426468af43f3" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="deb7b4dfb6ea2a15070ea3ab81760d53fed0dcfe2ceaa52d84ebfed4e255862b" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="9c396cf70302df5d9bd750a110f90dbba6b6ef7ad0d724ee0a6c2f908a8113b6" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="2d5d1f704f681431ab2cb1877eb65566f9398f41aa3cdbb79fd203280ce310b1" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="52e0a8b51379b513bd4a909eba658e2b6c9eea461d89c794a7766288bdd21f74" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="2f88875902b9a00c57f64f555b9fe84ae44121b5d625907fdc0d5446e552f38e" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="81f819ae099b12612fdad463c0e4e9db42e26487c2b7a5e6aac951217a5dd402" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="ac92c778216da05027b3797b32996faee710776044f2cfe39a3e891850138a5a" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="f04b1b32f187026bf6debbb83d8a9dda5b273532ef5e8acfafa3f72a6ab7f31c" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5e778a5bfca6069da2ca4b613b2c26403922698ce126228a7e5651f65159af00" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="6aeae35d1e0cdcd85a76ebc91f0d692ca7330fe367531a6755b94d0b583c65d1" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="538471cab2ac6fc657e4d0614e3f12502322d61c939fa879cfe11f956f755037" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="3e09fc161b79d18b789fe2c91f1d56ac7a933e12c69ecfc881ff6b4507243310" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="524bddd01ee58d882d5589a3594fa647ff22ab9c0040fa7d43d086ba8f075569" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="69c213f2041fe8b670380a5548bad593db53df5193fa0eb67421c60a47d6f731" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="a00ab9eacae15e9d97b08cea9c10da505f36e2779f43e2d942a40028c833fd51" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c1695e85690891d6b32bacdf00117717884a96e28d7c2dd15b33169e1571f16c" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="6dffe8775f7c673c94cb76b3d626f5c566a6edb0c6d93bc9c3f4a002ec90733d" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="dca1d5ff4dcf714b80408753cea495129a1d2f54005dc50ecff7f24a81c824ae" name="kernel-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="e7392036362f887be1df61cda27683e88ed55f1a4276a445dbcf47e5cafec74b" name="kernel-preempt" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c9380171960681784880d9ff7713a9bb0783a6327d4ce80a81198d038cdad238" name="kernel-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="770be68b1703a8f04d1b9bf2cc364358d2ae8d0cf8cc4297bb3d372285c98b1c" name="kernel-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="1ff5bcbab84644d5d41eebbf300ca01a1193af0d706f279baf0b8503c8331ae8" name="kernel-preempt" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="234d0c7191ff4925e766954dfb84a824dc0808b8b56b6af619d008abe9c5785f" name="kernel-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="e45dc3b5cb5c1b03225aa4611278169b9163a5c3a20fd5fd1e6bd03fc71d7a78" name="kernel-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="cd3936278ce3b03a6aa08817d98312e2cde9c60c9551254493717f2aebdbd2af" name="kernel-preempt" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="2c2a12334a0705373f57ff959597dca94dc0b3a4343fd05dc62ee950580c7d84" name="kernel-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="fa74e60e8a84499aea47f69e4915cdbdb05c186bac09eefdd4bb44460e109dfc" name="kernel-preempt-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="e250f7cd311f3c834f5c275fe84c26b0badb765f1d8ba8dea0a415e7a69a3e9e" name="kernel-preempt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c0d9c0240b931530a5f08bd0ef5d3e1bb864eabcd36fbe86706b909f693fd2ca" name="kernel-preempt-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c52b975b0dfa14ff829970a65403d4938565163dc43058585520cc82900ea9c1" name="kernel-preempt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="6800ffa0801e69efc195018f19f2a6bb190c50b2c9d42b8acf2c84dd3eb56d77" name="kernel-preempt-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="1d91170415a28f4cfb4fd81802395c26dcb373103a14471cf2413d336f131382" name="kernel-preempt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c0509ccd8201d0bdc5d57104e0dc4d7c72544818a01a3a3cdd7654522e8ee57e" name="kernel-preempt-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="e3226c33d587e75d7101b85c7237c025f4fc813a4974c008150a9c15ed40d9a9" name="kernel-preempt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="671079d4e0ae56eb5eef61100b1910af922352a6e807bd840509a7d9e27719ba" name="kernel-preempt-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="e7361ac33291d3c544bbde96c47249a2e7784126ad05358bd1743a2341049d8f" name="kernel-preempt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="1ae4d03c968d1bbf430838f630d21c1a9a9b1c2a97965117a7e7236020b92108" name="kernel-preempt-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="4645b7652f87dcbd16f70460ec341ae2fa96d599f07cc66a14f1132544016a62" name="kernel-preempt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="c09c077baa813d8193c85a0c9feb3d52d5e1651f6e99c0364bfe2110621ec2bf" name="kernel-preempt-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="83d01b130bb8c327b02de743f97fb336a4fb43d30c3770843fe3a5b95bbe8e24" name="kernel-preempt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="526925d3d10bfa3da6753aa3ca678633f3a7be9b1d90d2030b0e1ae15414d047" name="kernel-preempt-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="02feb36d897e75ae0a3ed5f29c68e38c50dc38989dc8915dfb6c61fda1b51350" name="kernel-preempt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="9903054b3a64baa230a9a81b4e8de8857e8a0cbf04786ae7ac90fe4cac8c6103" name="kernel-preempt-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="e86c12d5868ef032a926f10e645c4b331b95bc631b7f9a29f865f4faef2ef450" name="kernel-preempt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="1c61347694e82708ec6454155451b4da77749b516748fcbb1edd1d106f67a740" name="kernel-preempt-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="9a15f78b28bbc36439259ce85bf9d788582f4ed2af16a6c7db175fcb5061386d" name="kernel-preempt-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d3e4caaae4af7e6dd7b62b1a039c4499467e79071e9b2d6bf5832f8f92af1d6c" name="kernel-preempt-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="69701ed97b4217ded9359ec835aa813c4f8afbf11a22177e20a998875a09c419" name="kernel-preempt-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="26de2281411eeba5e64989ad4c63eb3fb80602489e076dc637dae3ef96e9c042" name="kernel-preempt-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="8b2373ca4373da8be4a8946a1cf1f474b4b7d64385e76eace7e6c0acfc8252e3" name="kernel-preempt-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="f79e599e1f1c35bdf14043d814ac205ed92aa7d97517e76bd8e1495552c25c8a" name="kernel-source" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="3cd578ee7e96b65ffd01242c52e8b5a5950f94178a6f6f34e85bf0802a18da5e" name="kernel-source" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="3ebba8430bb96a33b64d3a996c2d4334305fdbad847c173ec139e1290c2cece1" name="kernel-source" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="6da2442f2794a18d2c205c1d3bf1a9ccef0c7b07687c92229a19197b63a6c908" name="kernel-source" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="b2cf04a7048be751b1f0158f3b48720d498f7c817c2bf8ea63764bb3e1a8020b" name="kernel-source" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="f6e378450107aaabcce9ee1f65da4512506166fe2db5585be0db6c8fdf569d06" name="kernel-source" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="732fc307c6bd409acce71c05dee819ee0512994510cc11be884ef67f5bbcd420" name="kernel-source-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="ec2c878b57538b5c40ee3e72db08021e5247437e2eeeb48ded3cca3d1742ea52" name="kernel-source-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="561a2ba551cc51d6cb55ae7c1b07db7702af06b62ab46c95f071d6765fd2fb38" name="kernel-source-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="cbb847e145ac8311b1c6182960d38431f78a460f16eb384eb1299e44b1713bf4" name="kernel-source-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="592c5b592f7d17b869d5b04025e9c50de1af80c55e0d964be597c09718d05760" name="kernel-source-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="33ea43a7a1be29a9a23a076a6df3a72de440a157a1fc8bc183ebd84f640e4863" name="kernel-source-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="8a664dabf74fc8c80861622ed2f628e3e570f4a7b5a0d6e3312a6bf3af44ace5" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d15d0fbd3166c5e298f7f9a810fa9aaaca52e00a4067c0e5404bba8fee870a90" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="ce67ac7b8fb8f1351e367c64248149158f69dc12a3670dde41ec7bb7924dd801" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="4129041f69c58c03535a1cacec434689b61882c67a8fcb8b75d4ae42ab94114e" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="15a6226d687d187fa46d73051f1b9a8ab9f89ffd0bdfaf183e5f1891e24b8850" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="59458c05ccc36648df7570833fbe45a93f5fa76222d1d8e1beb78e746bdddbdb" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="d23c6542ec7a1bab31bf0b567b3d2955fabcb77b541e97a1d26a3d9fb1afd7bd" name="kernel-syms" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="5157adb8ed19326ff7c995d0f8015eb2e0b6eadbbd7d003c93adf3efeb965573" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="4085670994d2b808973a907a2613fd29daf497e2b3ea4bdb39a0ec7e24d67edd" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="0bd814c86a23592ba56eddf5620e6500a255949703d8f5d3d8faf4c15c88316e" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c69aa67bb76ab309f7ac97996dccd2d7d0dc20d67351c85c92e3a6b838db4683" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="77b867955e7d2f6fc90c1fed1fcbec75b55db424b6a819a54b4c271e4155e4cd" name="kernel-syms" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="9613763470123e4f4ee2b4f775e3e49149e1296d28e70f91167b04394ae816e3" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="59e661562ddc994e4919024a4fe9036084ef32443cc4b8d535c28bb1cc67af6c" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="3119e895096bfa6431a143cfc8d773798608fe0a5b6acc4988e33d14309a59ee" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="5d4021d4c7180dbbda995d8b602d95d1f76ef8bbcb0017ea0591c537c7f38ed8" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="7f0ed6de2bf76a43f543d2881b1ca0c2870b288f2a4776ce330516ea9d7358c0" name="kernel-syms" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0ffe3f370914c3fdd5c03a534d80d1ea5bc43a8dc5e76d05b8b721cd3813467b" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.1"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="efa9d924428660727c1adfe11f75c5cecda70ab75a44f697ed16fd0ede71c23d" name="kernel-syms-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="d0be417675c44ceaaf53b6e693148a9304da80db772494e89d00e67873909a65" name="kernel-syms-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="defd33f1705d473085377007a052a173091d2a89886b7b28c12b9ac2323c308c" name="kernel-syms-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="daa3090c4efbd412d96aebbec76ac9f5bbc42f50c9827fcc579e21385262392d" name="kernel-syms-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="729412f95af8a3c1ec1f010bc1b4a46ba02cd1c6ef2f76fd788d161d3d3a7fdd" name="kernel-syms-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="0bfb53a0186fd277204510c4418609a2714fc8a74eb7428f0fa7b64b8fa00ccc" name="kernel-syms-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="9a87e41d2b46b9238c2be1a07177afe952f3251af65e46b192fba0ed83e10076" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="9fecab0b81287e46f9e969a5f6ce1bad24c1b43e961d6ec4399c9457e1c43d94" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="87e599eb936d891ca172907d6d063e15d1b56dff1ae176040e85e8b56ba67846" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="287bcdcc9d5bab7d0f6fe3f923a40a7923eae5d3aebd4cc5aa68698468ed1404" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="5c23023e22565583606c286007dcdcae6a1c5591f242a9857db963c4b024b26c" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="ebc193a18bd4c093b06b8d99ab8dbf4582778add3f108cc40e97cdf2090636e7" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="0cfa779efa08aeed9c9674aca9d6f32bc57a88c14fc13a1474116538345ea620" name="kexec-tools" arch="aarch64">
  <version epoch="0" ver="2.0.20" rel="10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="aplanas@suse.com" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ptesarik@suse.com" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="clin@suse.com" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="clin@suse.com" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="ohering@suse.com" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="8c682127b24cf9b62d96ba2323489b8148947dcf0487bcddaf4e89f27fd88651" name="kexec-tools" arch="ppc64le">
  <version epoch="0" ver="2.0.20" rel="10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="aplanas@suse.com" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ptesarik@suse.com" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="clin@suse.com" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="clin@suse.com" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="ohering@suse.com" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="3ffeaebd9a2db9bd48c71003a92fade71364d535cee70990540e304e90b28803" name="kexec-tools" arch="s390x">
  <version epoch="0" ver="2.0.20" rel="10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="aplanas@suse.com" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ptesarik@suse.com" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="clin@suse.com" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="clin@suse.com" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="ohering@suse.com" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="da0fbef0275c70a7f5c0ba2edae9dec0bf721afbf7c0ccca1663274e3a1dc492" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.20" rel="10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="aplanas@suse.com" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ptesarik@suse.com" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="clin@suse.com" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="clin@suse.com" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="ohering@suse.com" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="598b0a5e150178932cdf8fa2879aa80c1603fbc824a9b9b304411407542245c2" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="aplanas@suse.com" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ptesarik@suse.com" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="clin@suse.com" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="clin@suse.com" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="ohering@suse.com" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="71f329de8d8ce51d563c521457fa67de16accafc7fd11d7b9bb4e69f75ec6073" name="kglobalaccel" arch="src">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9c607635678b856ca23b5c5c2f223abc643c591533532a3084439ef65e8b4e96" name="kglobalaccel-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="ba6ef058891b90fdab771b820ec134ee31412b5fa0053a8af95ecb2a619125b2" name="kglobalaccel-devel" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="5b019c45ec329e35568722ddf5058fe09d752b5a08e96eac1f39fcfc77136cb6" name="kglobalaccel-devel" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="26191b2b8dbfe2e1a735285a5eb5b286f1b80fe81ecbf02917d57912abb97b53" name="kglobalaccel-devel" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="3a306452f2b82d3ef8c05d841ab85ebcb43152f53dd0a07e3b90f0f8fa969f56" name="kglobalaccel-devel" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="c2add3970e64219deb4dedc87b8b8b0867ad1d09b4e253e54e44176161f40e73" name="kglobalaccel5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="f74f56585dac7165698e2617c7eafa96e2db3c41bda2ad1b6cccd6b48115be12" name="kglobalaccel5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="84d1631237bb14989fa6ae8cc5688a169e8258e1ec99d6acb175738803093501" name="kglobalaccel5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="91f5c32433eca6c191c4c47ce6c98ebc68d15e626a24bb8d050de8a98252ea67" name="kglobalaccel5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9031a85f217869cc53e90c0981c51b6fa8b428817943125503b8e4056484f851" name="kiwi-man-pages" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="bee0a9d4980f2f1839eb79e02f084cf6ab4c7ed1f5a5b4a1bc9e2332824d2229" name="kiwi-man-pages" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="76eaa4ec7f5aa82b951960e293a7dca6e188712a1efe92117af5dadbbbd9dd17" name="kiwi-man-pages" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f00a9380855e825cec8db075565b2f0f0a64777500bd3b5cfe3496c4708b6925" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c74de3751b5a600f30c481e190b95ecc4fc7215941e528270231d0ffba223e9a" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c95a09d702c82c028f526661ca00efd4fc40c8bd06d342b1224efbcbb6f28ddf" name="kiwi-systemdeps" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="104ec80c6924e6fa19fda0d6c7e0d8312b9eb024025424b3a83a1cfe32402a8e" name="kiwi-systemdeps" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="05d78523d7e0e196c433d7f0a66fb771bea1c3e543ce30d5e2228a2f7a2cf10a" name="kiwi-systemdeps" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a3f52adfa14898bc3bd819a13f47a45930973cc5270fc6c68b15c6c725afc4d3" name="kiwi-systemdeps" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="557b6885e59c0630e4850deef640322644a9581610bc91eee3de20050415fc4d" name="kiwi-systemdeps-bootloaders" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="65bec4085817a11abfed1d5b1bf38a6fa89355a3d06df056e7267dec4bd50001" name="kiwi-systemdeps-bootloaders" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4f8a0d7e73b4788d893f084fd24c1b76295dcb9cdc2c5bb7f346da4131d1ef9a" name="kiwi-systemdeps-bootloaders" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="04529da86ba6503881090fc638768aea4647a2ff79a9e79160a977ed07965ae3" name="kiwi-systemdeps-bootloaders" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="35a20c04a938dc164f153943a0d3771a54524fc5cae7a0ea34a46ebb90267749" name="kiwi-systemdeps-containers" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7dd2a1e6ee3d596323af4162e974cd08228ca744e22ed3c191b3bcaa38161d1a" name="kiwi-systemdeps-containers" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2a3ce448c711c9c4373638abb4a1191d13f0d772f3b3acc18d93489eae1287cf" name="kiwi-systemdeps-containers" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b5a29efb9c4378395e4a545284763bf979349f9b88484a0795547b7696394c26" name="kiwi-systemdeps-containers" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a6d35d3c77d04001eb492e01055bc19bf305d949c5f9de80fe80565745069252" name="kiwi-systemdeps-core" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="700eded5cabd0020c42ebfa38fd0ccc469ffca6375211973e4271792f727103d" name="kiwi-systemdeps-core" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4fa82cbdb18b6e28eebe3fe385d67b644ba6a3a9cb830803ac2fc24496606b29" name="kiwi-systemdeps-core" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f096b8bd7766ed4f1e5c71e1ec344f79d406f227daa86388f7171eddca5e63e3" name="kiwi-systemdeps-core" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="38632790c64e768302cfd34110a64b93a6065393df30b2baec72ab058ce28f0a" name="kiwi-systemdeps-disk-images" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="63869906caf472f5fee2925d1db3a4b74f98a236a2c4f3c6337cc719d36ca789" name="kiwi-systemdeps-disk-images" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a0f9febae20fe5374b3fc59704660b9768cb8af9855b14abcf6091b678cd32c8" name="kiwi-systemdeps-disk-images" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="0d5d1d44200431a24813766f221ad6452a9766b7e582a2434c8e95ddc9ab48d2" name="kiwi-systemdeps-disk-images" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7290c475c27575f3160554f6ecb447f9afe3f8e3b1cfb19e8e34a32c42dbeaf8" name="kiwi-systemdeps-filesystems" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="70d7790900921fa3a2be1280a133c07ccef290731c11b34866c6b5ef02df321b" name="kiwi-systemdeps-filesystems" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4300885b2c94658d7bdca890e87e3a63a1e79d1b81ec52413d0ca0e0cb74c771" name="kiwi-systemdeps-filesystems" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="8d21b0fe6e240a66f9377fca25eb71d7a91a90db1f22b9fa20be65d9f3567dc0" name="kiwi-systemdeps-filesystems" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e6e63659386835fa5400bedd8c3d458877e62649e72e7b01c54308a69124d5ea" name="kiwi-systemdeps-image-validation" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="fb32a6c92087dfa21b7d67eb036eee6a772b8ccfc98dca34b673436fe04b919a" name="kiwi-systemdeps-image-validation" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="209f06c06701089ee6e85e87f941ee6d6c1a2b9dbb956e584faddd254b198e5b" name="kiwi-systemdeps-image-validation" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="082e1396f66fca2ccd2c47b02d77985936bfe834ac9c39dbec16f36049c324a3" name="kiwi-systemdeps-image-validation" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b348649cf430aac224eb3c83d8ae56f35bc427c0f511b97924d9966e11274053" name="kiwi-systemdeps-iso-media" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4921127c288ad5a3b64ea785bce8a70952b697cea4218df02c00d89a2dd74320" name="kiwi-systemdeps-iso-media" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="6b6328dec44d2da93e59e36386a35e30869527a3ea79073d37d9ab4681f4f79e" name="kiwi-systemdeps-iso-media" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="9fe99c1f1d24a20b20f74e21a2b1423a7cd4b58e0093d2144db9fb7d9117a457" name="kiwi-systemdeps-iso-media" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="188c06ec54f79ab8fde834dd90367ff299a1683f797396948f70235e126a1e7c" name="kiwi-tools" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="552bffeeea1ab33f03c2e395a63b4b356201d382b558062fd661f122657da5b0" name="kiwi-tools" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="8a7036dc010ea4e846786b49a734a49722b6f3975d5121ca6fe313941202d2d8" name="kiwi-tools" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5ac128f9e09addb42931291c340de8b7d644838631cdc12c298ba79fda8c853c" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="dcassany@suse.com" date="1586952000">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a843165fc5f2594dde228cdfcd1e879589918560013bc04978cf82427b76cf2c" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="2100db0fc1444795b866939507c137569c7716b61be0d8197563c4637df55009" name="kpartx" arch="ppc64le">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="8a532b66a970d8f57323bad03e5dad4353d9bcc52313e0757f99431c976fa3c0" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="a842448cb68c54d14c1ad27f63d79938e418c2b293821609a156b18e82b5f7b1" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="89e0303e0ee2fcab17e31c74fda68e2b8f202e2f07ef36bb9e5cc57f340b7bcf" name="kselftests-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="c8bc675fffc4bb4d4392698c4a74acf4c539669594cd39a1759e09ad5bfb433e" name="kselftests-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="ff9b4a8a7ee85508364ef7b3c3253c3ad0a992b271c595859516a8b66a43dc95" name="kselftests-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="035595f3e05bc106a41235ba1ce25bb40b6c6fe7c94ae6e984b3134cfc2dd665" name="kselftests-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.11.1"/>
  <changelog author="lduncan@suse.com" date="1625140800">- Blacklisted SCSI ufs core patch: way out of context.
- commit 33b89f4</changelog>
  <changelog author="glin@suse.com" date="1625140801">- bpfilter: Specify the log level for the kmsg message
  (bsc#1155518).
- commit a6b5aff</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140802">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch
  patches.suse/xfrm-policy-Read-seqcount-outside-of-rcu-read-side-i.patch
- commit fc2830a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140803">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140804">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140805">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140806">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140807">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140808">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="bp@suse.de" date="1625140809">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="ohering@suse.de" date="1625227201">- x86/vdso: Mark the TSC clocksource path likely (bsc#1186071).
- hv_sock: Add the support of hibernation (bsc#1186071).
- hv_sock: set VMADDR_CID_HOST in the hvs_remote_addr_init()
  (bsc#1186071).
- hv_sock: use HV_HYP_PAGE_SIZE for Hyper-V communication
  (bsc#1186071).
- hv_sock: Use consistent types for UUIDs (bsc#1186071).
- commit e34e685</changelog>
  <changelog author="ohering@suse.de" date="1625227202">- x86/vdso: Move VDSO clocksource state tracking to callback (bsc#1186071).
- commit fc5b544</changelog>
  <changelog author="ohering@suse.de" date="1625227203">- hv_netvsc: Validate number of allocated sub-channels
  (bsc#1183682).
- drivers: hv: vmbus: Fix call msleep using &lt; 20ms (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch LINE_SPACING (bsc#1186071).
- drivers: hv: vmbus: Replace symbolic permissions by octal
  permissions (bsc#1186071).
- drivers: hv: Fix hyperv_record_panic_msg path on comment
  (bsc#1183682).
- hv_netvsc: Use vmbus_requestor to generate transaction IDs
  for VMBus hardening (bsc#1183682).
- scsi: storvsc: Use vmbus_requestor to generate transaction
  IDs for VMBus hardening (bsc#1183682).
- Drivers: hv: vmbus: Add vmbus_requestor data structure for
  VMBus hardening (bsc#1183682).
- x86/hyper-v: Add synthetic debugger definitions (bsc#1186071).
- asm-generic/hyperv: Add definitions for Get/SetVpRegister
  hypercalls (bsc#1186071).
- commit f79519d</changelog>
  <changelog author="ohering@suse.de" date="1625227204">- scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback() (bsc#1183682).
- commit e599609</changelog>
  <changelog author="ohering@suse.de" date="1625227205">- drivers/hv: remove obsolete TODO and fix misleading typo in
  comment (bsc#1186071).
- drivers: hv: vmbus: Fix checkpatch SPLIT_STRING (bsc#1186071).
- commit 9cc5e50</changelog>
  <changelog author="ohering@suse.de" date="1625227206">- Revert "scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback()" (bsc#1183682).
- commit fa61bc6</changelog>
  <changelog author="ohering@suse.de" date="1625227207">- PCI: hv: Drop msi_controller structure (bsc#1186071).
- hv_netvsc: Make netvsc/VF binding check both MAC and serial
  number (bsc#1186071).
- hv_netvsc: Add error handling while switching data path
  (bsc#1186071).
- hv_netvsc: Add a comment clarifying batching logic
  (bsc#1186071).
- scsi: storvsc: Enable scatterlist entry lengths &gt; 4Kbytes
  (bsc#1186071).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1186071).
- drivers: hv: Create a consistent pattern for checking Hyper-V
  hypercall status (bsc#1186071).
- x86/hyperv: Move hv_do_rep_hypercall to asm-generic
  (bsc#1186071).
- Drivers: hv: vmbus: Check for pending channel interrupts before
  taking a CPU offline (bsc#1186071).
- Drivers: hv: vmbus: Drivers: hv: vmbus: Introduce
  CHANNELMSG_MODIFYCHANNEL_RESPONSE (bsc#1186071).
- Drivers: hv: vmbus: Introduce and negotiate VMBus protocol
  version 5.3 (bsc#1186071).
- Drivers: hv: vmbus: remove unused function (bsc#1186071).
- Drivers: hv: vmbus: Remove unused linux/version.h header
  (bsc#1186071).
- x86/hyperv: remove unused linux/version.h header (bsc#1186071).
- x86/hyperv: Fix unused variable 'hi' warning in hv_apic_read
  (bsc#1186071).
- x86/hyperv: Fix unused variable 'msr_val' warning in
  hv_qlock_wait (bsc#1186071).
- hv: hyperv.h: a few mundane typo fixes (bsc#1186071).
- drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue
  (bsc#1186071).
- Drivers: hv: vmbus: Drop error message when 'No request id
  available' (bsc#1183682).
- asm-generic/hyperv: Add missing function prototypes per -W1
  warnings (bsc#1186071).
- clocksource/drivers/hyper-v: Move handling of STIMER0 interrupts
  (bsc#1186071).
- clocksource/drivers/hyper-v: Set clocksource rating based on
  Hyper-V feature (bsc#1186071).
- clocksource/drivers/hyper-v: Handle sched_clock differences
  inline (bsc#1186071).
- Drivers: hv: vmbus: Move handling of VMbus interrupts
  (bsc#1186071).
- Drivers: hv: vmbus: Handle auto EOI quirk inline (bsc#1186071).
- Drivers: hv: vmbus: Move hyperv_report_panic_msg to arch
  neutral code (bsc#1186071).
- Drivers: hv: Redo Hyper-V synthetic MSR get/set functions
  (bsc#1186071).
- x86/hyper-v: Move hv_message_type to architecture neutral module
  (bsc#1186071).
- Drivers: hv: vmbus: Move Hyper-V page allocator to arch neutral
  code (bsc#1186071).
- hv_netvsc: Fix validation in netvsc_linkstatus_callback()
  (bsc#1183682).
- PCI: hv: Fix typo (bsc#1186071).
- scsi: storvsc: Return DID_ERROR for invalid commands
  (bsc#1186071).
- scsi: storvsc: Validate length of incoming packet in
  storvsc_on_channel_callback() (bsc#1183682).
- scsi: storvsc: Resolve data race in storvsc_probe()
  (bsc#1183682).
- scsi: storvsc: Fix max_outstanding_req_per_channel for Win8
  and newer (bsc#1186071).
- Revert "Drivers: hv: vmbus: Copy packets sent by Hyper-V out
  of the ring buffer" (bsc#1186071).
- iommu/hyperv: setup an IO-APIC IRQ remapping domain for root
  partition (bsc#1186071).
- x86/hyperv: implement an MSI domain for root partition
  (bsc#1186071).
- asm-generic/hyperv: import data structures for mapping device
  interrupts (bsc#1186071).
- asm-generic/hyperv: introduce hv_device_id and auxiliary
  structures (bsc#1186071).
- asm-generic/hyperv: update hv_interrupt_entry (bsc#1186071).
- asm-generic/hyperv: update hv_msi_entry (bsc#1186071).
- x86/hyperv: implement and use hv_smp_prepare_cpus (bsc#1186071).
- x86/hyperv: provide a bunch of helper functions (bsc#1186071).
- x86/hyperv: handling hypercall page setup for root
  (bsc#1186071).
- x86/hyperv: extract partition ID from Microsoft Hypervisor if
  necessary (bsc#1186071).
- x86/hyperv: allocate output arg pages if required (bsc#1186071).
- clocksource/hyperv: use MSR-based access if running as root
  (bsc#1186071).
- Drivers: hv: vmbus: skip VMBus initialization if Linux is root
  (bsc#1186071).
- x86/hyperv: detect if Linux is the root partition (bsc#1186071).
- asm-generic/hyperv: change HV_CPU_POWER_MANAGEMENT to
  HV_CPU_MANAGEMENT (bsc#1186071).
- hv: hyperv.h: Replace one-element array with flexible-array
  in struct icmsg_negotiate (bsc#1186071).
- hv_netvsc: Restrict configurations on isolated guests
  (bsc#1183682).
- Drivers: hv: vmbus: Enforce 'VMBus version &gt;= 5.2' on isolated
  guests (bsc#1183682).
- Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
  (bsc#1183682).
- x86/hyperv: Load/save the Isolation Configuration leaf
  (bsc#1183682).
- hv_utils: Fix spelling mistake "Hearbeat" -&gt; "Heartbeat"
  (bsc#1186071).
- Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation
  (bsc#1186071).
- Drivers: hv: vmbus: Resolve race condition in
  vmbus_onoffer_rescind() (bsc#1183682).
- Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
  (bsc#1183682).
- Drivers: hv: vmbus: Reduce number of references to message in
  vmbus_on_msg_dpc() (bsc#1183682).
- Drivers: hv: vmbus: Initialize memory to be sent to the host
  (bsc#1183682).
- hv_utils: Add validation for untrusted Hyper-V values
  (bsc#1183682).
- Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the
  ring buffer (bsc#1183682).
- hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
  info (bsc#1183682).
- hv_netvsc: Allocate the recv_buf buffers after
  NVSP_MSG1_TYPE_SEND_RECV_BUF (bsc#1183682).
- hv_netvsc: Copy packets sent by Hyper-V out of the receive
  buffer (bsc#1183682).
- hv_netvsc: Add (more) validation for untrusted Hyper-V values
  (bsc#1183682).
- hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
  (bsc#1186071).
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
  (bsc#1186071).
- hv_netvsc: Check VF datapath when sending traffic to VF
  (bsc#1183682).
- vsock: fix locking in vsock_shutdown() (bsc#1186071).
- x86/hyperv: check cpu mask after interrupt has been disabled
  (bsc#1186071).
- use __netdev_notify_peers in hyperv (bsc#1186071).
- hv_balloon: do adjust_managed_page_count() when
  ballooning/un-ballooning (bsc#1186071).
- hv_balloon: simplify math in alloc_balloon_pages()
  (bsc#1186071).
- commit 8aa7b0a</changelog>
  <changelog author="ohering@suse.de" date="1625227208">- x86/hyperv: fix logical processor creation (bsc#1186071).
- commit 3182d1d</changelog>
  <changelog author="bp@suse.de" date="1625486400">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
</package>
<package pkgid="1409a289bcaac1d2a7c6731e1b932d627f5926b40ca0014fbdbef35f4e76b210" name="kselftests-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.3.1"/>
  <changelog author="hare@suse.de" date="1622462400">- nvme-pci: use simple suspend when a HMB is enabled (git-fixes).
- nvme-pci: make sure write/poll_queues less or equal then cpu
  (git-fixes).
- nvme-pci: align io queue count with allocted nvme_queue in
  (git-fixes).
- nvme-pci: remove last_sq_tail (git-fixes).
- nvme-pci: remove volatile cqes (git-fixes).
- nvme-pci: avoid race between nvme_reap_pending_cqes() and
  nvme_poll() (git-fixes).
- nvme-pci: dma read memory barrier for completions (git-fixes).
- nvme-pci: fix "slimmer CQ head update" (git-fixes).
- nvme-pci: Simplify nvme_poll_irqdisable (git-fixes).
- nvme-pci: Remove two-pass completions (git-fixes).
- nvme-pci: Remove tag from process cq (git-fixes).
- nvme-pci: slimmer CQ head update (git-fixes).
- commit dd74a78</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: document nvme controller states (git-fixes).
- commit 495f482</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462405">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462406">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="ykaukab@suse.de" date="1622462407">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462408">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462409">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="bp@suse.de" date="1622462410">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="hare@suse.de" date="1622548801">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548803">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548804">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548805">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548806">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
  <changelog author="dwagner@suse.de" date="1622548807">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="2f64c14067c05e080f8a059d1e0f0e8f8c3fb52cc42e3c8a142554d6fb265129" name="kselftests-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="38.8.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="80cc9d1bde637b95e8c05ba13502dea96a5753e4b663b5cf05f8401a929afe8a" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="b4ffbe98d4987bd18a775de85a9b3868169bd6821a2c89a3f428e438b64dbbec" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="9dd068f03151c2231b5d5c3483b8f0f453a8610a9f7f553a865ed05942210315" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="0c44960c4f322931fefb4bc12f1df9e80e3ee4a0374d7250812939045a59bdb4" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="90c66abfdcb3716e9fe5605e6eedbe8adab2db504627e513f6eaa4ab9a66fb6d" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="a7dc33ba0159639e56087521f700a8d93caff811402d818fbf6f399928d510d1" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="ccea49363f0b2872751219d18cf3d04259623b30975acd2fc34f958591dabf32" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="f96141ee916ea058c053190298d000875d77fdb989a1531bdaa08865b3545579" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="17def7d108cfcb41a19dc2b88fcc639f6966eae9cdcfd11c88132ac1309a3202" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="bc574dc1e66a066da97795b4c01d9886439f3a37f99f2597b57e6728176fcbff" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="2f411d9a5e516a2a22d52f5fdfcc58d044ae5f8c5ac2af9f2dc912852583cd5d" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="6360ccfb266e9bcdf1968f67b94c08c89f13e3022f245a849bf012c205e8cd63" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="95933db75b3bbeb9c6939f188280cae18e1124f6b1a4cc26795665398c9dbebe" name="kselftests-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="71759afd4e1dc61d2e587fb8e08ebfac05bb3a4359b70c30bd4d7b84c24dd0b5" name="kselftests-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.10.1"/>
  <changelog author="tiwai@suse.de" date="1623672000">- kABI workaround for rtw88 (git-fixes).
- commit 8a7edfc</changelog>
  <changelog author="tiwai@suse.de" date="1623672001">- efi/libstub: prevent read overflow in find_file_option()
  (git-fixes).
- commit 9d1183c</changelog>
  <changelog author="lhenriques@suse.de" date="1623672002">- blacklist: add commit 4f06dd92b5d0 ("fuse: fix write deadlock")
  This is an ancient bug (from v2.6.26) which require extra backports.  Not
  worth the risk introducing new regressions.
- commit f0ede60</changelog>
  <changelog author="bp@suse.de" date="1623672003">- x86/cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
  update_pasid() (bsc#1178134).
- commit 08621e3</changelog>
  <changelog author="mkubecek@suse.cz" date="1623672004">- series.conf: cleanup
  Move a queued patch to "almost mainline" section.
- commit a847492</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758400">- fix patch metadata
- fix Patch-mainline:
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
- commit c80eef0</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758401">- series.conf: cleanup
  Move a SUSE specific patch ("Patch-mainline: Never...") to corresponding
  per-subsystem section.
- commit 811dc9a</changelog>
  <changelog author="mkubecek@suse.cz" date="1623758402">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/mac80211-add-fragment-cache-to-sta_info.patch
  patches.suse/mac80211-assure-all-fragments-are-encrypted.patch
  patches.suse/mac80211-check-defrag-PN-against-current-frame.patch
  patches.suse/mac80211-do-not-accept-forward-invalid-EAPOL-frames.patch
  patches.suse/mac80211-drop-A-MSDUs-on-old-ciphers.patch
  patches.suse/mac80211-extend-protection-against-mixed-key-and-fra.patch
  patches.suse/mac80211-prevent-attacks-on-TKIP-WEP-as-well.patch
  patches.suse/mac80211-prevent-mixed-key-and-fragment-cache-attack.patch
  patches.suse/mac80211-properly-handle-A-MSDUs-that-start-with-an-.patch
  No effect on expanded tree.
- commit 9fdca2b</changelog>
  <changelog author="varad.gautam@suse.com" date="1623844800">- xfrm: policy: Read seqcount outside of rcu-read side in
  xfrm_policy_lookup_bytype (bsc#1185675).
- commit 372fbf0</changelog>
  <changelog author="tiwai@suse.de" date="1623844801">- Update config files: CONFIG_SND_HDA_INTEL=m for armv7hl, too (bsc#1187334)
  It's used by openQA.
- commit c363e06</changelog>
  <changelog author="mbrugger@suse.com" date="1623844802">- Refresh
  patches.suse/brcmfmac-Add-clm_blob-firmware-files-to-modinfo.patch.
- commit f631d93</changelog>
  <changelog author="colyli@suse.de" date="1623844803">- bcache: avoid oversized read request in cache missing code path
  (bsc#1187357, bsc#1185570, bsc#1184631).
- bcache: remove bcache device self-defined readahead
  (bsc#1187357, bsc#1185570, bsc#1184631).
- lib: crc64: fix kernel-doc warning (bsc#1187357).
- bcache: fix a regression of code compiling failure in debug.c
  (bsc#1187357).
- bcache: Use 64-bit arithmetic instead of 32-bit (bsc#1187357).
- md: bcache: Trivial typo fixes in the file journal.c
  (bsc#1187357).
- md: bcache: avoid -Wempty-body warnings (bsc#1187357).
- bcache: use NULL instead of using plain integer as pointer
  (bsc#1187357).
- bcache: remove PTR_CACHE (bsc#1187357).
- bcache: reduce redundant code in bch_cached_dev_run()
  (bsc#1187357).
- bcache: don't pass BIOSET_NEED_BVECS for the 'bio_set' embedded
  in 'cache_set' (bsc#1187357).
- bcache: Convert to DEFINE_SHOW_ATTRIBUTE (bsc#1187357).
- bcache: inherit the optimal I/O size (bsc#1187357).
- commit ce1a322</changelog>
  <changelog author="tiwai@suse.de" date="1623931200">- dmaengine: idxd: add missing dsa driver unregister (git-fixes).
- ALSA: seq: Fix race of snd_seq_timer_open() (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
  (git-fixes).
- ALSA: hda/realtek: headphone and mic don't work on an Acer
  laptop (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840
  Aero G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  EliteBook x360 1040 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Elite Dragonfly G2 (git-fixes).
- ASoC: amd: fix for pcm_read() error (git-fixes).
- ASoC: max98088: fix ni clock divider calculation (git-fixes).
- commit 4d314e7</changelog>
  <changelog author="jroedel@suse.de" date="1623931201">- x86/sev: Check SME/SEV support in CPUID first (jsc#SLE-14337).
- iommu/vt-d: Use user privilege for RID2PASID translation
  (bsc#1187348).
- iommu/virtio: Add missing MODULE_DEVICE_TABLE (bsc#1187345).
- x86/sev-es: Use __put_user()/__get_user() for data accesses
  (bsc#1187351).
- x86/sev-es: Forward page-faults which happen during emulation
  (bsc#1187350).
- x86/sev-es: Don't return NULL from sev_es_get_ghcb()
  (bsc#1187349).
- iommu/vt-d: Remove WO permissions on second-level paging entries
  (bsc#1187346).
- iommu/vt-d: Report right snoop capability when using FL for IOVA
  (bsc#1187347).
- iommu: Fix a boundary issue to avoid performance drop
  (bsc#1187344).
- x86/sev-es: Replace open-coded hlt-loops with sev_es_terminate()
  (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in the 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add CPUID sanity check to 32-bit
  boot-path (jsc#SLE-14337).
- x86/boot/compressed/64: Add 32-bit boot #VC handler
  (jsc#SLE-14337).
- x86/boot/compressed/64: Setup IDT in startup_32 boot path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Reload CS in startup_32 (jsc#SLE-14337).
- x86/sev: Do not require Hypervisor CPUID bit for SEV guests
  (jsc#SLE-14337).
- x86/boot/compressed/64: Cleanup exception handling before
  booting kernel (jsc#SLE-14337).
- iommu/amd: Keep track of amd_iommu_irq_remap state
  (https://bugzilla.kernel.org/show_bug.cgi?id=212133).
- x86/sev-es: Do not support MMIO to/from encrypted memory
  (jsc#SLE-14337).
- x86/head/64: Check SEV encryption before switching to kernel
  page-table (jsc#SLE-14337).
- x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path
  (jsc#SLE-14337).
- x86/boot/compressed/64: Sanity-check CPUID results in the
  early #VC handler (jsc#SLE-14337).
- x86/boot/compressed/64: Introduce sev_status (jsc#SLE-14337).
- x86/boot/64: Explicitly map boot_params and command line
  (jsc#SLE-14337).
- x86/head/64: Disable stack protection for head$(BITS).o
  (jsc#SLE-14337).
- commit 9810251</changelog>
  <changelog author="tiwai@suse.de" date="1623931202">- ASoC: Intel: soc-acpi: remove TGL RVP mixed SoundWire/TDM config
  (git-fixes).
- commit 85be7e7</changelog>
  <changelog author="oneukum@suse.com" date="1624276800">- usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
  (git-fixes).
- commit 9d5feb1</changelog>
  <changelog author="bp@suse.de" date="1624276801">- x86/fpu: Prevent state corruption in __fpu__restore_sig()
  (bsc#1178134).
- commit e509690</changelog>
  <changelog author="bp@suse.de" date="1624276802">- blacklist.conf: 28e5e44aa3f4 x86/mm: Avoid truncating memblocks for SGX memory
- commit ea06fd1</changelog>
  <changelog author="mgorman@suse.de" date="1624276803">- Refresh
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch.
  Add Signed-off-by tag for author of the patch in the SLE branch to suppress
  error during branch merges. Example error is
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch An email
  address with @suse.de, @suse.com, @suse.cz, or @novell.com in the From,
  Signed-off-by, or Acked-by headers is required
- commit acfd671</changelog>
  <changelog author="msuchanek@suse.de" date="1624622400">- Revert "Update config files (bsc#1187167)" (bsc#1187711).
  The key is needed. When a random key is generaeted it is a problem with
  OBS repository setup. OBS should provide a signing key.
- commit b53af95</changelog>
</package>
<package pkgid="16f3e0e4fa4e4319f1eb3b288a4acdcf8fe83f8cc85434c012633b1eeea2b869" name="kselftests-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="9857982dea3ca26954ce6674199e5c33f63c96481e2f94f7ff3bfd5111f1b46d" name="kselftests-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.13.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1625140800">- nvmem: rmem: fix undefined reference to memremap (git-fixes).
- commit 420be35</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140801">- SUNRPC: Handle major timeout in xprt_adjust_timeout()
  (git-fixes).
- Refresh
  patches.suse/0001-ipmi-watchdog-Stop-watchdog-timer-when-the-current-a.patch.
- Refresh
  patches.suse/block-return-the-correct-bvec-when-checking-for-gaps.patch.
- Refresh
  patches.suse/ibmvnic-remove-default-label-from-to_string-switch.patch.
- commit bff6126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1625140802">- perf/x86/intel/uncore: Fix a kernel WARNING triggered by
  maxcpus=1 (git-fixes).
- commit 9602802</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140803">- fix patch metadata
- fix upstream reference:
  patches.suse/bpfilter-Specify-the-log-level-for-the-kmsg-message.patch
- commit 4e6fe72</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1625140804">- Update
  patches.suse/RDMA-ucma-Rework-ucma_migrate_id-to-avoid-races-with.patch
  (bsc#1181147 bsc#1187050 CVE-2020-36385).
  Added CVE reference.
- commit f7b3ebb</changelog>
  <changelog author="mkubecek@suse.cz" date="1625140805">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/Revert-ibmvnic-simplify-reset_long_term_buff-functio.patch
- commit dc51831</changelog>
  <changelog author="lhenriques@suse.de" date="1625140806">- ceph: must hold snap_rwsem when filling inode for async create
  (bsc#1187927).
- commit 288e232</changelog>
  <changelog author="bp@suse.de" date="1625140807">- x86/fpu: Preserve supervisor states in
  sanitize_restored_user_xstate() (bsc#1178134).
- commit 8de1b90</changelog>
  <changelog author="bp@suse.de" date="1625140808">- x86/process: Check PF_KTHREAD and not current-&gt;mm for kernel
  threads (bsc#1152489).
- commit f14058e</changelog>
  <changelog author="glin@suse.com" date="1625227200">- bpf: Fix integer overflow in argument calculation for
  bpf_map_area_alloc (bsc#1177028).
- bpf: Fix libelf endian handling in resolv_btfids (bsc#1177028).
- commit f52fc7f</changelog>
  <changelog author="dwagner@suse.de" date="1625227201">- qla2xxx: synchronize rport dev_loss_tmo setting (bsc#1182470
  bsc#1185486).
- commit 8249f86</changelog>
  <changelog author="mkoutny@suse.com" date="1625227202">- cgroup1: don't allow '\n' in renaming (bsc#1187972).
- commit 31d330a</changelog>
  <changelog author="lduncan@suse.com" date="1625227203">- scsi: ufs: ufshcd-pltfrm depends on HAS_IOMEM (bsc#1187980).
- commit bc82289</changelog>
  <changelog author="bp@suse.de" date="1625227204">- x86/pkru: Write hardware init value to PKRU when xstate is init
  (bsc#1152489).
- commit 05b202a</changelog>
  <changelog author="bp@suse.de" date="1625227205">- blacklist.conf: d8778e393afa x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- commit 07e7bbd</changelog>
  <changelog author="bp@suse.de" date="1625486400">- blacklist.conf: 89f5f8fb5bf4 EDAC/thunderx: Remove irrelevant variable from error messages
- commit 7c3f543</changelog>
  <changelog author="bp@suse.de" date="1625486401">- x86/elf: Use _BITUL() macro in UAPI headers (bsc#1178134).
- commit 5b8c19e</changelog>
  <changelog author="bp@suse.de" date="1625486402">- blacklist.conf: 1e886090cefe docs: admin-guide: update description for kernel.hotplug sysctl
- commit 1332420</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572800">- fix patch metadata
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-synchronize-rport-dev_loss_tmo-setting.patch
- commit 81935f9</changelog>
  <changelog author="mkubecek@suse.cz" date="1625572801">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-move-login-if-fast-fail-is-enabled.patch
  patches.suse/scsi-ibmvfc-Handle-move-login-failure.patch
  patches.suse/scsi-ibmvfc-Reinit-target-retries.patch
  patches.suse/scsi-lpfc-Add-a-option-to-enable-interlocked-ABTS-be.patch
  patches.suse/scsi-lpfc-Add-ndlp-kref-accounting-for-resume-RPI-pa.patch
  patches.suse/scsi-lpfc-Fix-Node-recovery-when-driver-is-handling-.patch
  patches.suse/scsi-lpfc-Fix-Unexpected-timeout-error-in-direct-att.patch
  patches.suse/scsi-lpfc-Fix-crash-when-lpfc_sli4_hba_setup-fails-t.patch
  patches.suse/scsi-lpfc-Fix-node-handling-for-Fabric-Controller-an.patch
  patches.suse/scsi-lpfc-Fix-non-optimized-ERSP-handling.patch
  patches.suse/scsi-lpfc-Fix-unreleased-RPIs-when-NPIV-ports-are-cr.patch
  patches.suse/scsi-lpfc-Ignore-GID-FT-response-that-may-be-receive.patch
  patches.suse/scsi-lpfc-Reregister-FPIN-types-if-ELS_RDF-is-receiv.patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.10.patch
  patches.suse/scsi-scsi_dh_alua-Retry-RTPG-on-a-different-path-aft.patch
- commit 9a3a833</changelog>
</package>
<package pkgid="c99113d06c4b0344d4c8e521212a3fe440358ec3f03e9426fb4890987df5ee97" name="kselftests-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="dfac5abadd7a8ed53fc6bfd4c51d56dce19fc4f04058ca3108c5f22c74ecfbab" name="kselftests-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="59.5.2"/>
  <changelog author="aabdallah@suse.de" date="1622203200">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 9338bce</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit 3e0da56</changelog>
  <changelog author="ykaukab@suse.de" date="1622203202">- Revert "soc: fsl: qe: introduce qe_io{read,write}* wrappers"
  (git-fixes).
- commit 25de66e</changelog>
  <changelog author="ykaukab@suse.de" date="1622203203">- blacklist.conf: spi: add a cosmetic fix
- commit 67d8fed</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 54ae065</changelog>
  <changelog author="jlee@suse.com" date="1622203205">- Hibernation: Fix Hibernate not blocked in Secure Boot with no EFI secret key
  Refresh
  patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  (bsc#1186512)
- commit d15957a</changelog>
  <changelog author="dbueso@suse.de" date="1622203206">- futex: Make syscall entry points less convoluted (git-fixes).
- futex: Get rid of the val2 conditional dance (git-fixes).
- futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
  (bsc#1164648).
- futex: Change utime parameter to be 'const ... *' (git-fixes).
- commit c6c39e0</changelog>
  <changelog author="tiwai@suse.de" date="1622376000">- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
  (git-fixes).
- ALSA: usb-audio: scarlett2: Improve driver startup messages
  (git-fixes).
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
  (git-fixes).
- ALSA: usb-audio: fix control-request direction (git-fixes).
- commit ad502bc</changelog>
  <changelog author="tiwai@suse.de" date="1622376001">- ASoC: cs35l33: fix an error code in probe() (git-fixes).
- ASoC: cs42l42: Regmap must use_single_read/write (git-fixes).
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create()
  can be static (git-fixes).
- commit 72126c6</changelog>
  <changelog author="tiwai@suse.de" date="1622376002">- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 17 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook Fury 15 G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP
  Zbook G8 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
  (git-fixes).
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation
  P340 (git-fixes).
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga
  9i (git-fixes).
- commit 7ba5be9</changelog>
  <changelog author="mkubecek@suse.cz" date="1622376003">- series.conf: cleanup
- fix Patch-mainline and move unsortable patches out of sorted section
  patches.suse/0001-netfilter-conntrack-improve-RST-handling-when-tuple-.patch
  patches.suse/0001-netfilter-conntrack-add-new-sysctl-to-disable-RST-ch.patch
- commit 9d82526</changelog>
  <changelog author="mkubecek@suse.cz" date="1622462400">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/nvme-fabrics-decode-host-pathing-error-for-connect.patch
  patches.suse/nvme-fc-short-circuit-reconnect-retries.patch
- whitespace cleanup
- commit 03158d3</changelog>
  <changelog author="jeyu@suse.de" date="1622462401">- Rename duplicate patches to their SLE15-SP2 equivalents.
  This is to prepare for the next SLE15-SP2 -&gt; SLE15-SP3 merge.
- commit e32f455</changelog>
  <changelog author="bp@suse.de" date="1622462402">- x86/sev-es: Move sev_es_put_ghcb() in prep for follow on patch
  (bsc#1178134).
- commit 61a3120</changelog>
  <changelog author="ykaukab@suse.de" date="1622462403">- soc: fsl: qe: replace qe_io{read,write}* wrappers by generic
  io{read,write}* (git-fixes).
- commit d4c6a74</changelog>
  <changelog author="ykaukab@suse.de" date="1622462404">- tty: serial: ucc_uart: replace qe_io{read,write}* wrappers by
  generic io{read,write}* (git-fixes).
- commit 845115a</changelog>
  <changelog author="bp@suse.de" date="1622462405">- x86/sev-es: Invalidate the GHCB after completing VMGEXIT
  (bsc#1178134).
- commit 2ed6303</changelog>
  <changelog author="ptesarik@suse.cz" date="1622548800">- s390/ipl: support NVMe IPL kernel parameters (bsc#1185980
  LTC#192679).
- commit 36a59d3</changelog>
  <changelog author="dwagner@suse.de" date="1622548801">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
- commit cee62aa</changelog>
  <changelog author="ptesarik@suse.cz" date="1622635200">- partitions/ibm: fix non-DASD devices (bsc#1185857 LTC#192526).
- commit 0f96f57</changelog>
</package>
<package pkgid="11690b296aa12cf9e6560013e328cb57311a04b170c56d7af88d4c43ae0a19ab" name="kubevirt" arch="src">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="05e6800c137a36ff08c58abee1179cfc94aef8021eedb7289cbe42ac4d6f5339" name="kubevirt-container-disk" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="e94181458991952da0c7c8a709e2ace0bd3f509d20f7e6d20b48abbcebc69797" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="59384e4562c8c5419cdccbc4cb916b263d0608d02795cc65a5f92d8b1fdb18ea" name="kubevirt-tests" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="aea9295d4f7835e4662eee03ca93bea2161a378f75f1a2df68c4d239a2c98b47" name="kubevirt-virt-api" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="66f1056cf6c6f2b9d4235b3f9e12b7616b6d75906f66405e4b0724903c715d7d" name="kubevirt-virt-controller" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="cde50c79027c37b022d42119656b47f433eb1f71f266f104954f6b21b62e6d09" name="kubevirt-virt-handler" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="969c98d401c33e4e0239441203f53d7c7d5bf6aa8527b28dfee0c6fc9dff4997" name="kubevirt-virt-launcher" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="3b6e95e1aff02ac3f02e4bf6ce905f65ab323dbe35233ba12f6136b332217817" name="kubevirt-virt-operator" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="ed2d94f5c415149b33fdbe30434675d63b156e3be076717ac42d24e0902d6a1b" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.40.0" rel="5.11.2"/>
  <changelog author="dmueller@suse.com" date="1600171200">- Update to version 0.33.0:
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * tests, migration: Validate dual stack VMI and Pod IP/s
  * tests, make primary_pod_network dual stack compatible
  * tests, Create ValidateVMIandPodIPMatch helper
  * Turn off modules for staging.
  * Fix verifying make targets
  * Give migration kill pods a name not based on their node name
  * Fix another flaky ertificate related unit test
  * Fix matching of Makefile vars to env for goveralls
  * Output what the new error is when an api violation occurs
  * tests: adapt test-id:4153 to dual-stack cluster
  * sriov-tests, checkMacAddress: remove sequential expecter cases
  * sriov tests: Add CNI version to sriov NAD
  * removeNamespaces: add informative failure reason
  * cluster-deploy.sh: cancel cdi deployment on sriov-lane
  * remove version from go.mod
  * Use PingFromVMConsole for ipv6 instead of trace route
  * tests, make test 1780 dual stack compatible
  * refactor virtctl image-upload args
  * tests,libvmi: Append passed options
  * Rebase on Goveralls
  * Export -mod=vendor to always use vendor
  * Update ldflag to point to right package
  * Increase memory limit for iscsi pod
  * deps-update to reflect state after rebase
  * Fix test to properly work with TLS 1.3
  * Update kubevirt builder image to use go1.13.14
  * Add required dependencies for functest image build
  * Check if new api rule violation was added
  * Pin bazel for builder
  * selinux: relabel /dev/null to container_file_t
  * selinux, virt-handler: relabel the clone device
  * selinux, virt-chroot: provide a command to relabel files
  * Add gradle install for builder to reenable swagger
  * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0
  * Update builder image to include new goveralls version, remove ppc64le
  * Move coverage from travis to prow
  * Support VMI scheme multi IPs list in case of dual stack
  * Improve stability of fedora VM's login expecter
  * tests: Use new image for sriov tests
  * tests/containerdisks: add fedora-extended image
  * kubevirt/BUILD.bazel: push to cluster registry
  * containerdisks/ WORKSPACE, BUILD.bazel: add new image
  * containerdisks: add doc about container-disk images
  * Unit test to veriy migration target is cleaned when VMI is deleted
  * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist
  * Add unit test to verify stale clients are handled during pre migration target setup
  * abort migration if the vmi is deleted or in the process of being deleted
  * Add better logging to container disk mount/unmount
  * wait for virt-handler to come back online during migration fail func test case
  * ensure we detect the correct pod environment during isolation detection when migrating
  * ensure only we're mounting/unmounting the right pod's container disk during migration
  * gitignore: ignore files ending with ~
  * Ensures stale local data from failed migration target is cleaned before attempting to migrate again
  * Functional test to validate migration failures
  * Domain XML to be logged on info level
  * Fix the test default SMBIOS testcase
  * Add custom PCI tests
  * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl.
  * Allow podman for normal build steps
  * Makefile: Control timestamp addition
  * Makefile: Add timestamps to make targets
  * Makefile: Use realpath instead of shell to calculate path
  * export local provider variables to the correct location
  * no need to verify the number of depoyed nodes for local provider
  * Use proper namespace in functional test
  * Fix doc string
  * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container.
  * Fix tests binary release
  * tests: Add phoracek to approvers
  * create-tap: improve code readability
  * selinux: update the default launcher selinux type
  * create-tap: prevent FD leaking into the tap-maker
  * selinux: run virt-handler without categories
  * selinux: networking requires escalated selinuxLauncherType
  * selinux: create the tap device using launcher selinux label
  * create-tap: add a new cmd to virt-chroot
  * network: have the launcher pid for future tap device creation
  * Create tap devices w/ multi-queue support
  * masquerade/bridge binding: use pre-provisioned tap device
  * Create tap device on virt-handler
  * functests: Refactor VMI helpers
  * tests: Update the vmi instance after creation
  * tests: configureIPv6OnVMI remove unnecessary vmi parameter
  * tests, dual-stack: configure ipv6 on dual stack cluster vmi
  * Add all the missing test-ids
  * dual-stack: IsIpv6Enabled use podInterface addresses.
  * fix typo
  * Rename managed-by label to be literal
  * Don't add empty values to KubeVirtDeploymentConfig
  * Use more consistent config access function
  * Functional tests for product related labels
  * Add ProductName and Version labels to KubeVirt objects
  * Fix flaky certificate expiration unit test
  * tests, job: Rename RenderJob to NewJob and expose new args
  * Bump kubevirtci
  * tests, job: Use status condition to detect success/failure
  * use status updater to abstract enable/disable of VM status subresource
  * have to call UpdateStatus as well as Update otherwise status does not get updated, duh
  * UpdateStatus was not sufficient for certain snapshot controller updates
  * tests, console_test: use safe expect batcher
  * A low value of timeout in test setup causes failure in Azure.
  * Remove hidden `make generate` invocations
  * tests: change ping to use RetValue and PromptExpression
  * Test improvements: Use job instead of pod and fail fast while waiting for job.
  * tests: utils.RetValue no need to pass prompt
  * Remove domain label from VMI metrics
  * network: Add network-reviewers group
  * network: Move PodIP status test to network package
  * Fix clock timezone
  * set schedulable to true to test node-controller will respond to out of date heartbeat
  * add e2e test for virt-handler schedulable=false
  * virt-handler mark node as unschedulable until it is able to talk with kubelet
  * tests, ping: Extend the ping helper and generalize it
  * Check if the socket exists and not if the base directory exists
  * [virt-hanlder] test probing of cmd server socket
  * [virt-handler] test contanerDisk readiness checks
  * tests: [test_id:1778] remove redundant `sudo` and wait for prompt
  * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp
  * [virt-handler] wait for containerDisks to become ready
  * [virt-handler] let virt-handler probe for virt-launcher readiness
  * [virt-launcher] Replace --readiness-file logic with socket moving
  * [virt-controller] Remove readiness probes and --readiness-file flag
  * Remove exec readiness probe on the containerDisk container
  * tests, ping: Use tests.PingFromVMConsole directly
  * tests, ping: Move the ping helper to the tests package
  * Add test approvers
  * Let prow run make generate instead of travis
  * tests: avoid line wrap on fedora console
  * tests, Fix test 1780 of vmi_networking_test.go
  * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi
  * Do not perform local cleanup of vmi until vmi is in a finalized state
  * network: Add dedicated network tests module
  * Add support to configure vmi disk I/O mode options
  * Add openapi validatior unit tests
  * tests: Remove redundant string declarment in RetValue arguments
  * tests: Rename tests.Retcode to tests.RetValue
  * test: Fix flaky test for "A long running process"
  * test: Removing redundent \n send from test_id:1779
  * test: Fix falkiness in guest memory failing tests and skip failing one
  * tests: Add missing `\n` to expect.BSnd to test_id:1753
  * Shorten the release job exectuion time on travis
  * k8s-reporter: get all config-map
  * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend`
  * tests: Avoid squential expect.BExp in test_id:1778
  * tests: Remove un-needed \n send from "Checking console text" expecter
  * tests: using `Retcode` to check the result of "echo $?"
  * tests: Changing `retcode` to contain the prompt
  * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch
  * test: Configure console on login
  * tests: Intorduce safe ExpectBatchWithValidatedSend
  * Bump kubevirtci to support dual stack on k8s-1.18
  * Let virt-operator roll out the status subresource activation
  * Enable the status subresource feature for the CRDs
  * Let virt-controller use the new UpdateStatus client functions
  * Make use of the /status subresource in the virt-api subresources
  * Add validation webhooks for /status updates
  * Add status updater helper functions
  * Add UpdateStatus and PatchStatus to the kubevirt client
  * vmiMetrics struct was recreated with better attributes
  * tests: Create containerdisk sub-package
  * tests: Create flags sub-package
  * Give the VM rename operation more time to create a new VM
  * Expose guest swap metrics
  * Use 'kill' instead of 'killall' for libvirtd in func test</changelog>
  <changelog author="jfehlig@suse.com" date="1601467200">- Preparation for initial submission to SLE15 SP2
  jsc#ECO-2411</changelog>
  <changelog author="jfehlig@suse.com" date="1602072000">- Update to version 0.34.0:
  * jsc#ECO-2411
  * Add mirrored dependencies to WORKSPACE
  * Mark networking conformance tests
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Revert "move all tests to use kv config"
  * Revert "update config message to specify which resource type it is using"
  * Revert "test usage of configmap configuration"
  * Revert "update build file"
  * Revert "convert postcopy tests to use KubeVirt CR"
  * Rework logic so it is easier to understand what is happening
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * vmi, sriov: Enable to set the PCI address on a SRIOV iface
  * Don't discard bazel platform cache on virtctl cross-compilation
  * convert postcopy tests to use KubeVirt CR
  * fix autoconverge test
  * remove using BeforeAll in vmi configuration tests
  * generated openapi spec
  * clean up
  * start prom server earlier in the virt-handler process so health check returns without EOF error
  * change kubevirt config type MemBalloon
  * dump kubevirt cr in ci artifacts
  * cpuRequest can not be type string since when the resource is patched it will fail to parse the units
  * change bool to pointer to know unset vs value set to false
  * update build file
  * test usage of configmap configuration
  * update config message to specify which resource type it is using
  * move all tests to use kv config
  * virt-launcher, Add mechanism to guard add/delete events channel
  * Generated artifacts
  * Add functional tests for missing subresource RBAC rules
  * Allow admins and editors of a namespace to [un]pause a VMI
  * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility
  * Add functional test to validate api compatiblity during update
  * changed migration test to use table
  * only log event if migration is stuck during post copy migration
  * change api from MigrationMode to AllowPostCopy
  * switch to post copy migration if not completed with in acceptableCompletionTime
  * update openapi spec
  * add NFS migration test with postcopy
  * remove vmiHasLocalStorage function
  * fix migration tests
  * remove reject postcopy for storage test
  * remove nested vmi migration configuration
  * change usePostCopy to migrationMode
  * move when mode is set
  * allow for postcopy migration
  * maybe fix flakes test
  * vendor in 1.23.5 CDI to hand golden namespace use case
  * Validate network interface name
  * tests, utils: Check events watcher type before casting
  * Add readiness and health probes to virt-handler
  * Removes unusable fields from vm DataVolumeTemplates
  * virt-launcher, Remove unneeded log
  * virt-launcher, Remove double domain event sending
  * virt-launcher, Fix Guest Agent updates causing an event handling deadlock
  * selinux: always build KubeVirt with selinux support
  * Run make generate
  * Adjust ceph-rook focus for e2e tests
  * wrong apiVersion used for VirtualMachineRestore owner references
  * update init container unit tests to validate container-disk pre-pull
  * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts
  * add '--no-op' option to container-disk entry point for pre-pull logic
  * Make the nogo check pass
  * Make kubevirt compile with bazel 3.4.1
  * Update builder image to bazel 3.4.1
  * wait for vmi-killer pod to start before moving on
  * Document basic parallel-test execution needs
  * Integrate the junit merger into the parallel functest execution
  * Add a tool to merge partial junit results
  * Don't set the namespace in the VMI factory
  * Run most of the VMI lifecycle tests in parallel
  * Run kubectl related tests in parallel
  * Hugepages are limited, run the relevant tests not in parallel
  * Make version and vm-watch tests execute in parallel
  * Don't check terminating pods if they pick up config changes
  * Run container disk tests in parallel
  * Run expose tests in parallel
  * Run probe tests in parallel
  * Allow running VMI Preset tests in parallel
  * Run most of the cloud-init tests in parallel
  * Make subresource tests part of the parallel test suite
  * Adjust subresource access tests to new test service accounts
  * Reference the default namespace directly
  * Add a skip check for a migration tests if enough nodes are available
  * Make access tests parallel executable
  * More parallel tests
  * Resolve test-namespace name in the test
  * Allow VM tests to run in parallel
  * Allow console tests to run in parallel
  * Allow the headless service tests for VMIs to run in parallel
  * Allow tests in vmi_configuration_test to run in parallel
  * Make it possible to set the number of parallel executors
  * Increase slow test threashold to 60 seconds
  * Ensure that --skip and --focus flags are only passed onces
  * Change build environment to execute ginkgo in parallel
  * Let the ginkgo reporter log where it will dump artifacts
  * Split setup and teardown code between parallel and synchronized steps
  * Consume the ginkgo binary from the vendor folder
  * Mark all tests as have to be run in serial
  * fix typos
  * docs: Update for k8s-1.18 as default provider
  * Add option to log BIOS output to serial and use it to test for bootable NICs
  * Migrate VMI when its pod is marked for eviction
  * Intercept evictions on virt-launcher pods
  * Support testing kubevirt on RHCOS
  * Update kubevirtci to latest commit
  * create tap device: add multiqueue support to netlink
  * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio
  * allow to set a cpu allocation ratio in kubevirt config
  * Test IDs for Node Placement tests
  * only focus on tests that require rook-ceph for rook-ceph lane
  * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string
  * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded
  * Keep conformance artifacts on the top level
  * tap device: use netlink instead of songgao's water lib
  * netlink: update vendor folder
  * bazel: update netlink dependency
  * Release func tests on every release
  * Add missing test ids
  * Fix sync of generated client-go to master
  * flaky pause test: make long-running process longer and quieter
  * switch virtiofs tests to use datavolume
  * test that vitriofs file written in the guest is present in the pod
  * functional test to verify that virtiofs is enabled
  * update generated files
  * virtiofs requires virt-launcher selinux policy changes
  * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label
  * handle filesystem virtiofs devices
  * vmis with virtiofs require memory backing shared access
  * allow CAP_SYS_ADMIN when the experimental virtiofs is required
  * add a filesystem device schema element
  * add a memorybacking access schema element
  * Adding feature gate for experimental virtiofs support
  * selinux: allow creating VMIs on nodes without selinux
  * examples, vmi-masquerade: correct userData script
  * tests: change hostdisk tmp path to /var/provision
  * Bump kubevirtci to start testing k8s-1.19 provider
  * Fix ACPI doc string
  * Add functest for KVM hidden
  * Support hiding KVM MSR from guest
  * add snapshot APIGroup to aggregate cluster rules
  * tests, networkpolicy: Add ports 80/81 tier1 http tests
  * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn
  * Bring openapi spec in sync
  * Fix logical error in affinity copy logic
  * Add optional validation marker for new fields
  * Update functional tests to match new object layout
  * Fix unit tests for new object layout
  * Fix injectPlacementMetadata to accept ComponentConfig objects
  * Generated Artifacts
  * Introduce ComponentConfig to contain NodePlacement
  * Functional tests exercising placement logic
  * Unit tests to ensure correctness of injectPlacementMetadata
  * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs
  * Generated artifacts
  * Define NodePlacement for workloads and infra
  * Port NodePlacement from HCO
  * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding
  * Add conformance automation and manifest publishing
  * SELinux: merge .cil policies and add a lot of comments
  * vnc: use generic VNC client on comments
  * vnc: remove unused FLAG const
  * tests: re-enable couple of certificate functests
  * network, tests: check IPv6 probes on dual stack network configs
  * probes, tests: provide a TCP/HTTP server running on an helper pod
  * network, tests: move the HTTP/TCP server creation to a separate file
  * probes, tests: create ready/not ready asserter functions
  * probes, tests: encapsulate VMI creation into a function
  * probes, tests: have probe creation helpers
  * tests, network: correct the string length
  * probes, tests: exclusively use cirros VMIs on the probes tests
  * network, tests: delete the leaked Jobs on the test tear down
  * network, tests: ping first, then connect on helloWorld jobs
  * network, tests: use assert / failed connectivity checks
  * network, tests: add dual stack masquerade binding service tests
  * network, tests: prepare for multiple binding / dual stack configs
  * network, tests: move services functests to dedicated module
  * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory
  * fmt updates
  * Adjust timelines and verbage to reflect feedback
  * Fix release scripts git email and name variables
  * New release documentation
  * Replace outdated release announce script with new tool
  * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -&gt; "v1.Patch" &amp; "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -&gt; "v1.Patch".
  * dual-stack, tests: actively check the cluster for dual stack conf
  * dual stack, tests: check if the cluster is dual stack
  * Add creation of bazelrc for running unnested in prow
  * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux
  * selinux: print reason why getting launcher context failed
  * network, tests: add a flag to skip a test asserting dual stack conf
  * Addressed comments
  * fix virtctl image-upload ignoring custom storage class
  * Add unit tests for Service patching
  * use informer for VirtualMachineRestores in restore webhook
  * staticcheck updates
  * don't allow creation of a VirtualMachineRestore if on is in progress
  * make VirtualMachineRestores owned by VM
  * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer
  * Correctly check VM run strategy
  * check running/runstrategy before restoring and one additional functional test
  * tighten up functional tests
  * initial functional tests for VM restore
  * restore controller generate events on completion and error
  * updates from rebase
  * add source UID to VMSnapshot status and verify source matches target when restoring
  * fix apiGroup handling
  * VM sestore webhook
  * restore unit tests
  * restore controller implementation
  * snapshot controller waits for no VMIs or pods using PVCs
  * add VirtualMachineRestore type and CRD
  * remove include/excludeVolumes
  * update VirtualMachineRestoreStatus object to include timestamp and error
  * add VirtualMachineRestore type and CRD
  * Fix overloaded 'v1.Patch' api field
  * Prevent delete and replace of service endpoints with ClusterIP == ""
  * Fix validation for self-signed cert and addressed comments
  * Add support for camel-case spellings of "userdata" and "networkdata"
  * tests, net: Add dual-stack checks for post migration connectivity
  * tests, net: Remove post migration connectivity workaround
  * Enhance operator functional tests to validate pods are torn down after kv cr is deleted
  * test: set kubevirt.io/memfd = false for k8s 1.16
  * Add annotation kubevirt.io/memfd
  * Unit tests to validate finalizer functionality on kubevirt objects
  * Restore ability to set finalizer on kubevirt objects
  * Unit tests to verify operator injected labels remain consistent
  * Restores operator managed by label for backwards/forwards compability during updates
  * Add mhenriks to approvers/reviewers list
  * introduce retryOnConflict to certificate infra test
  * tests, Make network policy tests dual stack compatible
  * make generate after git rebase
  * deps-updae &amp;&amp; generate
  * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg
  * Update cdi in client-go and manifests/testing to v 1.21
  * Run make deps-update
  * Bumped CDI version to 1.21.0
  * virt-api: allow update of VM metadata and status during VM rename process
  * Rename option --allow-intermediate-certificates to --externally-name
  * Add unit test for cert-manager
  * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api
  * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation.
  * Limit CriticalAddonsOnly taint to a single compute
  * Add test-id's for VMI migration and lifecycle testcases
  * Add event for vmi failed render
  * test, masquerade: Add dual stack vmi to vmi ping
  * tests, Fix Network Policy Flakiness
  * tests, Add waitForNetworkPolicyDeletion
  * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests
  * tests, Remove SkipIfNotUseNetworkPolicy
  * tests, expecter: Centralize expecter helpers under expecter.go and login.go
  * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters
  * add test_id to functional test
  * add openapi listType=atomic to patches
  * add func test for custom patches
  * add custom patches to kubevirt resources on creation
  * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned
  * update: fixing and adding unit tests
  * test: add reserved hugepages
  * tests, skip migration fail test on kind ipv6 provider
  * test: add test for source in memorybacking
  * Add source in memorybacking
  * Set NUMA to use memfd
  * virt-operator: on update, roll over daemonsets first, then controllers
  * virt-operator: fix a copy-paste error
  * Add functional test for custom-port flag
  * Make use of stdout cleaner
  * Added functional test
  * Add option to run only VNC Proxy in virtctl
  * Keep a single go_test_default rule
  * Document on how to use the conformance tests
  * Add the first conformance test
  * Add wrapper binary for conformance tests
  * Detect the kubevirt install namespace dynamically
  * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON.
  * tests, network: Test connectivity pre/post migration
  * tests, job: Convert WaitForJobTo* to a non-assert version.
  * Generate deepcopy for NUMA
  * add a NUMA schema element
  * Removal of unnecessary output
  * Added e2e test for unused memory metric
  * Fix virtctl build for linux-amd64
  * Adds new metric kubevirt_vmi_memory_unused_bytes</changelog>
  <changelog author="jfehlig@suse.com" date="1603454400">- spec: Fix typo in date command</changelog>
  <changelog author="jfehlig@suse.com" date="1603972800">- spec: Remove needless use of chmod and build-copy-artifacts.sh</changelog>
  <changelog author="jzerebecki@suse.com" date="1604145600">- Add package with built YAML manifests used to install kubevirt</changelog>
  <changelog author="jfehlig@suse.com" date="1604664000">- spec: Generate the registry path for kubevirt-operator.yaml at
  build time. Prjconf macro 'registry_path' can be used to
  override registry path to the KubeVirt container images
- spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP
  privileged PSP, to the manifests subpackage
- spec: Don't add component name to DOCKER_PREFIX passed to
  build-manifests.sh</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- spec: Add rpmlintrc to filter statically-linked-binary warning
  for container-disk binary. The binary must be statically linked
  since it runs in a scratch container.</changelog>
  <changelog author="jfehlig@suse.com" date="1605009600">- Update to version 0.35.0:
  * sriov lane: skip flaky tests until their issue is resolved
  * add an independent claclulation of required vcpus for mem overhead calculation
  * adjust memory overhead calculating by adding a static 10Mi
  * move guest cpu topology modification to vmi mutator webhook
  * Ensure that we restore the cdi-insecure-registry configmap in tests
  * Add test_ids_cnv_2.5
  * dual stack, expose, tests: remove batchv1.Job duplicated code
  * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync
  * dual stack, expose, tests: skip on non dual stack clusters
  * dual stack, expose, tests: port VM service tests
  * tests, multus-tests, SRIOV: configure IP based on MAC or name
  * Catch goroutine panic with GinkgoRecover in tests
  * tests, multus_tests: make helpers return an error
  * dual stack, expose, tests: port VMIRS cluster IP service test
  * dual stack, expose, tests: port UDP services test
  * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs
  * dual stack, expose, tests: port the VMI service test cases
  * Bump kubevirtci
  * make generate and make deps-updateand update test import
  * Bump CDI to 1.25.0
  * Reduce the cluster size a little
  * dual stack, expose, tests: get the IP addr from a DNS name
  * bump kubevirtci: get latest sriov provider
  * Infra test made invalid assumptions about cluster composition
  * Fix panic when endpoints were empty.
  * dual-stack, virtctl: expose ipv6 services
  * Remove 'string' from json tag to preserve type information in our API
  * automation: cancel CDI insecure registries cehck on sriov lane
  * Emit an event if we detect terminating pods
  * tests, pausing_test: change long process test
  * test, infra_test, Adapt tests to support dual stack
  * tests: remove `IsRunningOnKindInfraIPv6`
  * fix wrong logic in SetDriverCacheMode log message
  * Revise functional test to verify 440 read only image
  * Build container disks with 440 mode and 107:107 ownership
  * Add e2e test for replacing terminating pods immediately
  * Bump kubevirtci
  * test: Remove all the usages of `IsRunningOnKindInfraIPv6`
  * Disable service links on virt-launcher Pod
  * tests, infra-test, Remove unneeded vmi creation
  * infra_test, Refactor tests to use a DescribeTable
  * infra_test, Add validation of errors
  * Fix flaky timezone test
  * Let VMIRS react to terminating pods of VMIs
  * Let the VMI indicate when Pods are terminating
  * functests, macvtap, migration: successful macvtap VMI migration
  * functests, migration: move some asserter subset to common helpers
  * functests, macvtap, multus: use libvmi Cirros VMI factory
  * functests, macvtap, multus: schedule the VMs in the same node
  * tests: update the `StartVmOnNode` method to return the started VMI
  * examples, macvtap, multus: add example for macvtap VMI
  * macvtap, admitter: macvtap requires multus network
  * functests, macvtap, multus: add connectivity test between VMs
  * macvtap: feature gate macvtap feature
  * functests, multus: refactor `configInterface` to allow sudo
  * functests, macvtap, multus: add test with a custom MAC address
  * tests: remove all net-attach-defs on test cleanup
  * automation, macvtap: restrict macvtap func tests to multus lanes
  * unit tests, macvtap, multus: introduce macvtap
  * macvtap, multus: add macvtap BindingMechanism
  * improving PCI configuration tests
  * Template the cdi namespace
  * add dev registry as insecure registry to cdi
  * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes
  * Datavolume container registry import test
  * CONTRIBUTING: point developers to kubevirt-dev slack
  * rebase
  * Remove incorrect listtype
  * fix 1.19 lane
  * Propagate error from patchValidation
  * rebase
  * reduce scope to vm/vmi
  * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default)
  * update builder
  * review
  * Add missing markers
  * Test verifying kubectl explain works
  * Adding test verifying crds are structural
  * Use controller-gen to generate validations for crds
  * test if crds for operator are correct
  * adding tools for generating correct validation
  * cleaning generated desc. and nullable fields in status
  * adding patching of crds for operator
  * adding markers for controller-gen
  * tests, restore tests: check on successful commands
  * Fix gosec issue: week random generator
  * Bump kubevirtci
  * It is not always bad for VolumeSnapshot to have an error
  * Fix artifacts in gosec target
  * tests, infra-test, Refactor node selection
  * Do not change vnc socket's permission to 0444
  * tests, infra-test, Fix node updates
  * tests, infra-test, Add missing break when selecting a node
  * tests, pausing test: increase time for long process
  * tests, login: expect fedora full prompt
  * tests, migration, stress-test: remove doubled `\n`
  * tests, re-factoring: use safe expect-bathcer and prompt Expression
  * tests, infra-test, Add missing check on AfterEach
  * tests, infra_test, Add missing assign when removing taints
  * Don't parallelize cluster-sync dependencies
  * hack: Print cluster-* script name when complete
  * Point to kubevirtci for new providers.
  * Update documentation to refer to scripts having moved to cluster-up/
  * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR
  * tests: Add missing asserts to the vmi-configuration tests
  * Adapt conformance tests to support migration.
  * automation: remove ipv6 lane
  * Set read only for our demo container disks and verify their mode does not change at runtime
  * Attempt to use whatever permissions a container disk has applied to it without mutating the file
  * rebase + fix compile error due to another PR
  * set the label for downwardAPI test in the test itself
  * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test
  * add downwardAPI volume in the test instead of in the helper
  * delete commented out line
  * Adding function tests (for make functest)
  * remove rule violation
  * support  DownwardAPI volum source
  * Fix typos and formatting
  * tests/utils: remove 'IsIPv6Cluster' function
  * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips
  * VM status to report whether volumes support snapshots.
  * tests, network: Relocate VMI/POD IP validation w/ Guest Agent
  * Fix pull-kubevirt-apidocs
  * tests: Render pods in the test namespace
  * tests, iscsi: change 'CreateISCSITargetPOD' to return pod
  * Lift the e2e test parallel run restriction for fedora guests
  * Give the CI nodes two more GB of memory
  * Adjust bump script to use tagged kubevirtci releases
  * tests, console: Rename functions to fit the new package
  * tests, ping: Move ping under libnet package
  * tests, expecter: Create a console helper package
  * Bump kubevirtci
  * Mirror new dependencies
  * update builder image
  * tests, networkpolicy: Wait for VMIs readiness in parallel
  * Exclude .git and _ci-configs at bazel's goimports
  * multi-queue: cap the maximum number of queues
  * Add 2.x QEMU Guest Agents to the list of supported versions
  * Update to fedora 31 as base image.
  * Add test_id for post-copy migration with Guest Agent Test
  * dual stack, services, tests: enclose test setup in a `By` clause
  * dual stack, services, tests: really check connectivity exists
  * dual-stack, tests: skip IPv6 test on non-dual stack clusters
  * dual stack, services, tests: unify the `Job` cleanup solution
  * dual stack, services: provide more explicit info on test execution
  * tests: test the masquerade bridge has the correct mtu
  * virt-handler/launcher: Set the pod iface mtu on the bridge
  * restore backwards compatiblity with api group/version on DataVolumeTemplates spec
  * Add short readme
  * multi-queue, tests: assuret we can request a VM with a single vCPU
  * api: update the API description of the NetworkInterfaceMultiqueue flag
  * tap-device, multi-queue: enforce single-queue tap
  * Delete kubevirt service accounts from default privileged SCC
  * Added helper function to return all kubevirt service account users
  * Removing redundant tests related to SCC users modification
  * Added unit tests for SCC users modification upon upgrade.
  * Remove kubevirt service accounts from default privileged SCC
  * tests, nfs: avoid failures in afterEach of a skipped test
  * test, nfs: Change CreateNFSTargetPOD to return a Pod
  * tests, dualstack: don't stop nfs tests cleanup in case of an error
  * tests, dualstack: use IPFamily instead of boolean to mark tests
  * tests, dualstack: introduce SkipWhenNotDualStackCluster
  * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack
  * docs: Fix the ginkgo flags usage example
  * Properly exit if kubevirt does not get ready on cluster-sync
  * Rework logic so it is easier to understand what is happening
  * fix restore controller memory corruption
  * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated.
  * Save a nice cluster-overview to the artifacts
  * Disable goveralls debug output
  * Take time in cert tests after CA generation
  * Use coverage merge tool for goveralls
  * Introduce a tool to merge coverage reports
  * Enable atomic count, race detection and fix races
  * Move coverage reports over to bazel
  * Use a proper cc_library for libvirt dependencies
  * Auto-generate Help message from /metrics endpoint to docs/metrics.md
  * tests, libnet: Relocate validation to libnet
  * tests, libnet: Move cloud-init net and dns to libnet
  * Fix flaky rename test
  * Run Travis CI only on selected branches, remove sudo flag
  * tests, infra-test, Solve CI flakiness due to update conflict
  * Fix flaky unpause tests
  * Refactor .json files to go file
  * Mark networking conformance tests
  * Fail only when new issue comes up
  * Fix high severity&amp;confidence issues
  * Add gosec to project
  * Fix display of virtctl help text for other usages
  * tests, libvmi: Introduce CloudInit NoCloud Network Data
  * functest for PR #4132
  * Fix coexistance of scsi and sata drives</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Fix -buildmode=pie
  fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1608552000">- Update to version 0.36.0:
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * Update ADOPTERS.md
  * tests, utils: shorten name of random VMs
  * Move some datavolume tests to the ceph lane
  * Old kubevirt released don't support CDIs WaitForFirstCustomer
  * Let virtiofs consider WaitForFirstCustomer setting of CDI
  * Use Immediate bind on negative PVC Datavolume tests
  * Enable WaitForCustomer CDI feature gate by default
  * Generate v1beta1 client for CDI
  * Don't try to hotplug waitForFirstCustomer PVCs
  * Fix access credential unit tests
  * Ensure that our service accounts can always update the VMI status
  * Update to a libvirt image with a newer seabios.
  * adjust pci address tests to consider the new virtio-iscsi controller
  * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it.
  * Disable complex tests for now.
  * HotplugVolumes feature gate
  * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged.
  * Added functional tests with block volumes. Fixed functional attachment logic.
  * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message
  * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests.
  * Improve error messaging during hotplug subresource add/removew
  * Fixes issue with VolumeRequests validation on the VM
  * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes.
  * Addes abilty to watch for libvirt device add/remove events for hotplug volumes
  * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests.
  * Attach disk to VM
  * VM controller unit tests for volume hotplug
  * Ensure we only add/remove volume operations are only performed if needed
  * Volume add/remove subresource unit tests
  * VolumeRequest validation unit tests
  * Validation logic for VM VolumeRequests
  * Hotplug VM Functional Tests
  * Add VM controller logic for handling volume add/remove requests
  * Add hotplug subresource api endpoints
  * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter
  * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments
  * Automatically add virtio-scsi controller to all VMIs.
  * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function.
  * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through.
  * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions
  * Attachment POD life-cycle code, including updating VMI status.
  * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf
  * macvtap, migration, tests: add a test w/ traffic
  * tests, network: Remove vmi Status ip normalization
  * tests, sriov: Use cloud-init to set IPv6 by MAC
  * tests, multus: Use network-data at bridge-cni test
  * tests, libnet: Add Match feature and expression builder to networkData
  * Update feature gate setup to new CDI version (now on CDI CR)
  * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus
  * Update test_id:5252 to run with WFFC enabled
  * check PVC if it waits for first consumer
  * Remove API phase "Provisioning"
  * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod".
  * Remove sysctl binary dependency
  * Bump atlassian/bazel-tools
  * tests, network: Fix race condition GA test
  * virt-handler, status: Do not include the IP prefix consistently
  * Allow to run subset of rules for gosec
  * tests, dual stack: split probes tests to test per IP-Family
  * bump kubevirtci
  * Add ADOPTERS
  * make generate &amp;&amp; make deps-update
  * bump cdi to 1.26.1 (from 1.25.0)
  * dev guide, networking: no capabilities are required
  * Increase CDI deployment timeout
  * expose, tests: fix early shutdown of `nc` TCP connections
  * Fix misspellings
  * Fixes race condition in func test
  * Properly handle failures when starting the qemu agent access credential watcher
  * Ignore warnings during vmi startup in access cred functests
  * Update access credential documentation and openapi markers
  * access credential sync events
  * Remove authorized_key file merging.
  * Report access credential status as a condition on the VMI
  * Revise access credential authorized_key file merging
  * Provide list of users for ssh auth instead of files
  * Make the authorized keys files list required for qemu guest agent propagation
  * Add unit tests to validate secret propagation watching
  * UserPassword access credential webhook validation and unit tests
  * unit tests for agent access credential injection
  * functional test for user/password credentials
  * Addition of UserPassword access credentials
  * Functional tests for access credential ssh key propagation
  * Reload dynamic access credentials based on secrets using fsnotify
  * Introducing the accessCredentials api for dynamic ssh public key injection
  * virt-launcher, agent-poller: Start poller with short intervals
  * virt-launcher, agent-poller: Refactor the Poll method
  * tests, login: Remove tests/login.go
  * test, login: Remove LoginToAlpine from login.go
  * tests, ipv6: Configure VMI IPv6 through console only when needed
  * test, login: Move loggedin expecter to console package
  * virt-launcher: Improve libvirtd debug log filters
  * tests, login: Move login.go to console/login.go
  * virt-handler, sriov: Add network name in VMI interface status
  * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments
  * Fix for flake CI test
  * Use the correct emulator prefix for qemu cleanup steps
  * Fix hardcoded qemu-kvm occurance in a migration test
  * Remove in some tests the assumption  of hardcoded qemu emulators
  * Explicitly set virtio-scsi on the scsi controller
  * WORKSPACE: Update libvirt container
  * Switch to use anew  global close() function in pkg/util Fix typos and remove extra comments
  * tests, console: Remove VMIExpecterFactory
  * Fix double migration during node drain
  * test, network: Add bridge binding + ga test
  * networking, tests: also check the MTU of the tap device
  * tests, libvmi: Remove interface,network config from NewFedora
  * linux capabilities: remove CAP_NET_ADMIN
  * libvirt, tap: create the tap device w/ the same user as libvirt
  * mtu, tuntap: set link MTU when creating the tap device
  * libvirt, mtu: do not perform any network config on the launcher
  * net admin: disabling tx checksum offloading on virt-handler
  * Add a log message if we pick up a new CA bundle
  * Increase rotate intervall
  * tests, multus, sriov: Refactor tests
  * Update bazel files
  * Switch to use named return errors to allow updating the error from defered function
  * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message
  * Mirror PVC struct
  * Add function test to validate IO mode settings
  * Set IO to native also for pre-allocated file disks
  * Switch to use a common function GetImage and remove GetImage from manager.go
  * Use qemu-img in order to identify sparse files and get image info
  * Set the IO mode to 'native' when possible for better performance
  * test, cloudinit: Use "json" annotation instead of "yaml"
  * tests, multus, sriov: Fix flakiness due to race between ga and test
  * tests, multus, sriov: Add validatePodKubevirtResourceName
  * tests, multus, sriov: Add missing error check
  * tests, multus, sriov: Fix checking for the same network twice
  * image-upload: wait up to 5 min for PVC and Pod
  * Remove domain label from kubevirt_vmi_memory_unused_bytes
  * gosec - fix CWE 326
  * virt-launcher: drop CAP_NET_RAW from compute container
  * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server
  * agent-poller, test: Extract AsyncAgentStore tests to new file
  * agent-poller, test: Rename agent poller test
  * tests, console: Require at least two batchers for the safe expector
  * tests, console: Introduce SafeExpectBatchWithResponse
  * tests, console: Replace some NewExpecter usages
  * tests, console: Change NetBootExpecter to not return an expecter
  * tests, login: Replace the Alpine login helper
  * tests, login: Replace the Cirros login helper
  * tests, login: Check privileged console prompt
  * tests, login: Replace the Fedora login helper
  * tests: Use LoginTo* helpers in waitUntilVMIReady
  * updated the technical description
  * Add enp0s3 to approvers list
  * Change file permissions on binary directory
  * docs: Fix documentation for useEmulation flag
  * virt-config: Fix tests for KubeVirt CR
  * virt-config: Drop stopChan
  * removed the word place-holder
  * fix gosec sha1 week cryptographic issues
  * Fix gosec md5 weak cryptographic primitive
  * Fix shell formatting, fix entrypoint path
  * Disable Virtio-FS Metadata Cache
  * Add Igor Bezukh to test approvers
  * Fix permissions tests for VMs
  * lock device plugings maps during device controller shutdown
  * dp: verify that host devices topology is being correctly reported
  * update the API fields so it be complient with API rules.
  * testutils: remove unnecessary changes to the config mock
  * tests: move the soundcard test out of the GPU module
  * Add a "GPU" passthrough functional test
  * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer
  * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD
  * request host devices on vmiPod as well
  * make sure that permitted host device config is working as expected
  * add unit tests to veriy host devices assignment
  * device-manager: clear permitted device list before parsing
  * device-manager: added mdev tests + misc fixes
  * device-manager: improve the PCI tests
  * device-manager: misc post-rebase fixes
  * add GetInitialized to pci and mdev device plugings
  * add HostDevices feature gate
  * device-manager: add static tests for PCI device discovery functions
  * device-manager: few cosmetic fixes
  * make sure that vmis can request only permitted gpus
  * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig
  * device-manager: mock PCI device info getters for tests
  * Fix device controller static tests to match the new API
  * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring   them later
  * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop
  * close device plugin channel is a safe manner
  * introduce a ControlledDevice struct for the device controller to keep dpi stop chan
  * Fix ignored static DPs, fix typos and remove defer Stop() in Start()
  * Refactor permanent device plugin code
  * dynamically start and start device plugings for permitted/banned devices
  * propagate hostDevConfigMapInformer to device controller
  * virt-launcher: handle allocated host devices using a single map
  * reject specs with non-permitted HostDevice and GPU resources
  * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs
  * collect PCI and MDEVs made available for assignement by the device plugins
  * add alias to libvirt hostdev struct
  * separate ResourceNameToEnvvar to utils
  * add device plugings for permitted devices which are present on the nodes
  * add a device plugin for mediated devices
  * add a device plugin for pci devices
  * add virt-config to device controller
  * add a HostDevices api schema
  * add TopologyInfo to out device plugin api
  * rename the device manager controller for kvm controller
  * introduce a new hostDevConfigMapInformer
  * handle the kubevirt-host-device-plugin-config config map
  * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap
  * Revert "Merge pull request #4470 from oshoval/fix_sriov"
  * tests, Fix CDIInsecureRegistryConfig logic
  * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil.
  * tests, sriov: Do not mount /sys/devices/ for SRIOV devices
  * virt-launcher: remove redundant cidr from dhcp server address
  * tests, sriov: Fix the helper that waits for a vmi to start
  * tests, Fix SRIOV UpdateCDIConfigMap panic
  * add unit test
  * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM
  * Consolidate shell script files into functions
  * Create main shell scripts to call from the ci-config
  * Fix comment typos
  * Add scripts for nightly master deploy
  * Move code for downloads and test execution into scripts
  * ensure the virt-handler killer pod has gone
  * audit the usage of unsafe pointers
  * Set leader metric after controller is functional Add a unit test for this
  * Define side effects class on our webhooks
  * Improved the Technical Overview description
  * changed: VM has only one VMI
  * Included a figure to illustrate the components architecture
  * Included a little bit more details in the virt-launcher description
  * Included a little bit more details in the virt-handler description
  * Included a little bit more details in the virt-controller description
  * Make the name of components bold
  * Improved the Technical Overview description
  * Fixed typo</changelog>
  <changelog author="jfehlig@suse.com" date="1611144000">- Update to version 0.37.0:
  * Remove travis-ci logic for pushing to quay app registery
  * Update Quay credentials in travis config
  * MacvtapPodInterface.setCachedInterface: fix arg name
  * make generate: 2021 edition
  * tests, dhcpv6: verify connectivity survives after migration
  * tests, dhcpv6: use python server instead of nc
  * tests, dhcpv6: start dhcpv6 client, config d.route &amp; prefix via console
  * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests
  * tests: split masquerade connectivity tests to ipv4 and ipv6
  * tests: remove libnet.WithIPv6 from ipv4 only dhcp test
  * dhcpv6: unit tests
  * dhcpv6: Extracting the build of the server response to a separate method
  * dhcpv6: Add the request iana to the response
  * dhcpv6: reply to dhcp solict with rapid commit
  * add ipv6 address to VIF.String
  * dhcpv6: run only for masquerade
  * dhcpv6: introduce prepareDHCPv6Modifiers
  * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW
  * dhcpv6: handle requests from client - adding DUID and IANA options
  * virt-launcher: vendor dhcpv6
  * virt-launcher: introduce dhcpv6
  * Extend version functional tests
  * Set --stamp as default build flag
  * imageupload: improve nosec comment
  * cloud-init: test that GenerateLocalData can run twice
  * cloud-init, GenerateLocalData: simplify staging replacement
  * tests, ping: increase default amount of packets
  * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call
  * cloud-init, GenerateLocalData: drop ambiguous comment
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * add use case Signed-off-by: xiaobo &lt;zeng.xiaobo@h3c.com&gt;
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Document dependency update flows
  * Newer curl version don't allow headerless HTTP
  * Build all test images in kubervirt/kubevirt
  * Add managed RPMs and remove unmanaged RPMs
  * Add repo.yaml files
  * Add bazeldnf dependencies
  * Add a script to resolve RPM dependencies
  * virt-launcher, converter: Extract SRIOV hostdev creation
  * virt-launcher, converter: Refactor network indexing
  * virt-launcher, converter: Refactor iface multi queue
  * tests, vmi_multus: test Sriov with Vlan
  * Don't overwrite user-provided GOFLAGS
  * Handle btrfs subvolumes when parsing mountinfo
  * Add mount info test cases
  * Add testdata for mount info tests
  * Cleanup duplicated code
  * Refactor containerdisk mount code
  * tests,sriov:make createSriovVms recieve network names
  * tests, sriov: remove un-needed function.
  * tests: sriov: extract NAD creation to a helper
  * tests, utils, delete vmi waiting: assert on err
  * Preapre build environment for bazeldnf
  * use placement api for assinging virt-handler pod
  * virt-launcher, libvirt: Free (all) domain resources
  * Generate release manifests using quay images
  * Add maiqueb to code-reviewers list
  * Update vendored dependencies
  * Update versions of some dependencies
  * only validate status of vm, vmi, and vmi migration objects
  * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens.
  * smbios, sidecar hook, tests: assert the hook version is advertised
  * smbios cmd: set the version parameter as mandatory
  * examples, hooks: correct the vmi-sidecar-hook example
  * add kubernetes os nodeSelector to injectPlacementMetadata
  * virt-launcher, converter: Set SRIOV device as unmanaged
  * tests, sriov: XFail IPv4 connectivity test
  * Append rootfs mount to containerdisk base path
  * Narrow down watcher select which waits for object states
  * Fix Eventually which used the time out as description
  * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures
  * use filepath.Clean for two fixed path parameter functions
  * virt-launcher, converter: Remove vCPU dependency on queue limits
  * add Kubermatic to adopters list
  * manager_test: add err check for ioutil.TempDir
  * windows_test: remove duplicate code
  * cleanup tempfiles for manager_test
  * cleanup tempfiles for common_test
  * Functional test to verify vmis are migratable after update to from latest KubeVirt official release
  * update libvirt base container to rhel-av 8.3
  * Unit test to verify evaculation controller generated migration object fields
  * evacuation informer should only observe the creation of migration objects it created
  * cloud-init: Allow populate networkData alone
  * tests, sriov: XFail IPv6 connectivity test
  * dev guide, networking: net_raw cap is not required by virt-launcher
  * Revert "dev guide, networking: no capabilities are required"
  * Make sure to use all supported versions for status subresource
  * Update csv gen logic for v1 api
  * Update hardcoded references to v1alpha3 in unit tests
  * Update unit tests to account for aggregated api server registration for v1 API
  * Update functional tests that had hardcoded references to v1alpha3
  * Add functional tests to verify vm creation using all supported API versions
  * Add v1 api version
  * Revert "linux capabilities: remove CAP_NET_ADMIN"
  * Revert "libvirt, mtu: do not perform any network config on the launcher"
  * move kv update validation webhook to operator validation configuration
  * Fix test id for io mode test
  * update listtype markers for kubevirt pci host devices
  * Fix gosec unhandled errors in delete.go &amp; create.go
  * Cleanup k8s jobs from test namespaces
  * If the fedora login expecter is stuck, retry
  * tests, multus: Change 3rd network SRIOV vnic name
  * tests, sriov: Centralize SRIOV network names
  * tests, multus: Fix IP address configuration
  * tests, Use RandName for creating random VMI names
  * Fail detection and handling when EFI without SB is not available
  * Add unit test covering GetDomainSpec fallback behavior
  * Reject --access-mode ReadOnlyMany when uploading an image.
  * Consume nightly build images from quay
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Fix failing unit tests for new GetDomain logic
  * Remove race condition from GetDomain check
  * Fix timed domain resync
  * fix patch for removing infra and workloads from KV
  * add webhook to validate kubevirt CR updates  - only allow updates to workloads key if no vmis are running
  * tests, sriov: Retry ping if it fails
  * tests, libvmi, vmi: shorten random vm names #2
  * tests, gpu: Do not mount /sys/devices/ for SRIOV devices
  * VMI configuration test: fix disk cache modes testing
  * fix gosec g204: Subprocess launched with variable
  * Removed unused function readProcCmdline()
  * Enable and fix tests
  * Fix gosec issue of: Potential file inclusion via variable
  Dropped patch: fix-goflags-overwrite.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1613390400">- Add building of virt-tests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1614772800">- Update to version 0.38.1:
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Expose field name 'ipFamily' for k8s &lt; 1.20
  * Bump k8s deps to 0.20.2
  * verify that VMIs can be started with images not owned by qemu provided by FS PVC
  * change ownership of the image provided by a filesystem PVC to qemu
  * virt-launcher's FSGroup functional test is obsolete
  * virt-controller: Remove FSGroup from Pod
  * cloudinit.GenerateLocalData: defer removal of temp files
  * rpm: update `make rpm-deps`
  * launcher / handler rpm: add tar as pod dependency
  * cloudinit.GenerateLocalData: drop ineffectual assignment
  * tests/config_test: fix ineffectual assignment to err
  * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err
  * tests/replicaset_test: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err
  * tests/vnc_test: fix ineffectual assignment to err
  * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err
  * pkg/virt-controller/watch/migration: fix ineffectual assignment to err
  * tools/vms-generator/utils/utils: fix ineffectual assignment to err
  * tests/vmi_gpu_test: fix ineffectual assignment to err
  * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err
  * multus, tests: assert error does not happen
  * Bump bazeldnf to v0.0.15
  * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err
  * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err
  * tests/infra_test.go: fix ineffectual assignment to err
  * tests/vmipreset_test: fix ineffectual assignment to err
  * func tests, multus: getting the kubevirtClient must be done first
  * func tests, multus: execute BeforeAll before BeforeEach
  * document the interface between hostdev device plugins and kubevirt
  * Refactor methods to reduce their Cognitive Complexity
  * Define a constant instead of duplicating literal
  * Refactor method to reduce its Cognitive Complexity
  * Define a constant instead of duplicating literals
  * Refactor method to reduce its Cognitive Complexity
  * Add a nested comment indicating about an empty function
  * Define a constant instead of duplicating a literal
  * Refactor methods to reduce their Cognitive Complexity
  * Increase subresource pod test execution timeout
  * Add Nvidia as a KubeVirt ADOPTOR
  * ipv4, network tests: refactor the masquerade test table
  * controller, virtinformers: Define the unexpected error once
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * Converter: Handle 'float' memory
  * Tests: Ensure cpu/memory in requests/limits allow int/float
  * virt-launcher: Support (non-)transitional virtio-balloon
  * rpm: Bump libvirt and QEMU
  * tests/utils: fix ineffectual assignment to ok
  * tests/utils: fix ineffectual assignment to err
  * tests/utils: fix ineffectual assignment to scale
  * pkg/container-disk/container-disk_test: fix ineffectual assignment to path
  * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err
  * tests/vm_test: fix ineffectual assignment to err
  * tests/vm_watch_test: fix ineffectual assignment to cmdName
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err
  * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res
  * tests/reporter/kubernetes: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err
  * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output
  * pkg/virt-handler/vm_test: fix ineffectual assignment to err
  * tools/util/marshaller: fix ineffectual assignment to err
  * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err
  * tests/restore_test: fix ineffectual assignment to restore
  * removing trello reference as its no longer used
  * Adjust e2e test which checks for the scsi controller
  * consider scsi controllers in virtio version decisions
  * Bump kubevirtci, now hosted on quay.io
  * network: BindMechanism receiver name consistency
  * MacvtapBindMechanism.loadCachedInterface fix arg name
  * Clean error message for not migratable VMI
  * Fix detection of previous release version in operator func test
  * Alert when less than 2 KVM nodes available
  * Fix a datavolume collision
  * Remove danielBelenky from reviewers
  * KubeVirt is now released on quay.io only
  * [virt-operator] load new certificates earlier
  * Keepalive function for travis to prevent timeout due to inactivity on stdout
  * Fix limits/requests to accept int again
  * network: rename NetworkInterface and PodInterface
  * network: drop NetworkInterface.Unplug
  * network: eliminate mocking of SetupPodNetworkPhase2
  * network: make SetupPodNetworkPhase1 into a constant function
  * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface
  * network: rename getNetworkClass
  * network: rename getNetworkInterfaceFactory
  * fix review English phrasing
  * virt-api/webhooks: test newly-renamed function
  * virt-api/webhooks: simplify and rename ServiceAccount-matching function
  * split sync resources into multiple functions and files
  * tests: Test guest restart after migration
  * Normalize DNS search domains to lower-case
  * Revert "Fix typos in log output"
  * tests: After migration test is not invoked
  * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only
  * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC
  * Example code for gosec fix
  * Update gosec.md
  * guidelines for using gosec analysis tool
  * docs/devel/networking: unbreak URL
  * Add virtctl image-upload usage for WaitForFirstConsumer DVs
  * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume
  * bump bazeldnf
  * Fix typos in log output
  * Extend isolation test to cover IsMounted method
  * Wrap mountinfo parsing common code into a function
  * start virt-launchers with a non-default log verbosity
  * change virt-controller log verbosity on relevant config changes
  * change virt-api log verbosity on relevant config changes
  * change virt-handlers log verbosity on relevant config changes
  * add default log verbosity values to cluster config
  * allow registering multiple callbacks for config changes
  * add a logVerbosity struct to set KubeVirt components log verbosity
  * Remove travis-ci logic for pushing to quay app registery
  * Make mutating webhooks required
  * Bump bazeldnf to a version with its own ldd implementation
  * Add tests
  * Fix typo
  * Fix some typo in docs
  * Add alert for insufficient number of nodes with KVM resources
  * Remove dockerhub-related travis jobs and credentials
  * Make `make build-functest` work without nested bazel invocation
  * Compile template-manifestor with bazel
  * Invoke shfmt from bazel
  * Add gofmt to our vendor tree
  * kubevirtci, Bump kubevirtci
  * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors
  * Allow setting user local bazelrc settings.
  * Update Quay credentials in travis config
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * tests: make client in hello world job UDP wait for response
  * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time
  * Increase time to wait for failed connection
  * virt-controller: increase the number of VMI controller threads
  * sriov, tests: xfail vlan test
  * network: simplify getNetworkInterfaceFactory
  * network: drop long-unused plugFunction
  * network: drop long-unused qemuArgCacheFile
  * network: rename constant to primaryPodInterfaceName
  * network: drop global podInterfaceName variable
  * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false
  * add vi-minimal to base packages for containers
  * Additional hotplug functional tests
  * Add unit test for PCI address parsing
  * Escape dot '\.' in PCI_ADDRESS_PATTERN
  * Move ParsePciAddress function to hardware utils
  * Bump bazeldnf to fix rpm verification
  * Drop references to kubevirt-host-device-plugin-config cfgMap
  * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues
  * Reviewers update: Adding EdDev as a code reviewer
  * virt-launcher/handler: move Macvtap discovery of MTU and target
  * virt-launcher/handler: Macvtap shouldn't use vif cache
  * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level.
  * Use the array value instead of a new variable when possible
  * eliminate the usage of interface address in decorateConfig()
  * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces
  * fix some tabs/spaces mess
  * Fix memory aliasing in for loop - taking the address of loop variable is dangerous
  * ENV VAR for client-go scheme registration version
  * Give kubevirt pods more time to become ready
  * Fix PV selector for windos and rhel PVCs
  * Make storage tests fit for parallel execution
  * Use the new nfsserver library in the migration tests
  * Create windows and rhel PV within the corresponding tests
  * Prepare our framework in utils for parallel storage test execution
  * Move nfs server rendering to its own package and adjust memory requests
  * Add a ginkgo matcher library especially for kubevirt
  * Prepare image provider for parallel execution
  * Code Review edits
  * Bump kubevirtci
  * Stick with virtio model on the ballooning device
  * Tablet input device only exists as virtio 1.0
  * virtio-serial controllers need the model set too
  * Add virtio-transitional e2e test
  * Extract converter into its own subpackage
  * Unit test for choosing virtio-transitional
  * Make the converter aware of virtio model preferences
  * Add a global VMI flag to the API to fall back to virtio_transitional
  * tests, xfail: Change XFail API to wrap the expected failure
  * Don't override the e2e kubevirt config by default in the e2e tests
  * virt-launcher/handler: remove the tap device from the VIF cache
  * Use virt-handler image as base for multus tests
  * Explicitly build libvirt-devel tars
  * Remove no longer needed go_library definition
  * Allow qemu to bind to privileged ports for slirp
  * Docuement how RPM verification can be done
  * Add a RPM verification target
  * Bump to bazeldnf with improved RPM verification
  * fix logos dependency
  * Add GPG keys to repo.yaml
  * Update RPMs
  * Avoid dependency flipping
  * add ps binary
  * Update dependency update documentation
  * Remove old libvirt-devel dependencies in WORKSPACE
  * Prepare binary containers for bazeldnf built content
  * Start using bazeldnf RPMs for building and testing
  * Add RPMs
  * Add repo.yaml files
  * Add a script to resolve RPM dependencies
  * Document new kubevirt handling of WaitForFirstConsumer DataVolumes
  * Fix support for camelCase userData and networkData labels
  * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo
  * Extend VMI count metric to include osinfo
  * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md
  Added patch: dont-use-bazel-in-build-manifests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1617796800">- Update registry path</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618488000">- Drop csv-generator</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833600">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618833601">- Update to version 0.40.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920000">- Package node-labeller.sh along with virt-launcher</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1618920001">- Fix issue when calling `virsh-domcapabilities`
  fix-virsh-domcapabilities-error.patch</changelog>
</package>
<package pkgid="f37778f7aa37ff17c433c8daba0c906971c189b9e4d1954f9734fb19de903308" name="ldirectord" arch="aarch64">
  <version epoch="0" ver="4.8.0+git30.d0077df0" rel="8.5.1"/>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="ddiss@suse.com" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="dakechi@suse.com" date="1565784000">- Update to version 4.3.0+git131.7af8c368:
  * mysql/mariadb/galera: use runuser/su to avoid using SELinux DAC_OVERRIDE
  * Generate addition drop-in dependencies for podman containers
  * Delay: protect grep regex argument from shell globbing
  * ipsec: fix bashism; [ a == b ] -&gt; [ a = b ]
  * changing bashism to generic solution
  * iSCSILogicalUnit: only create acls if it doesnt exist
  * LVM-activate: fix monitor might hang due to lvm_validate which was added by accident
  * check if mod_status is present in configuration
  * Load apache status modules from RA cmdline for SUSE only OS (bsc#1138281)
  * Improve PidFile pattern
  * CTDB: drop sysconfig presence check during validate
  * CTDB: generate script.options file for 4.9+
  * podman: only use exec to manage container's lifecycle
  * Fix path to example for ocf python agent
  * CTDB: support Samba 4.9+ (bsc#1137130)
  * Medium: Filesystem: Prevents to all root user processes are killed when bind mounting a directory on rootfs.
  * aws-vpc-route53: Removed absolute path for awk command (bsc#1140874)
  * aws-vpc-route53: Tuning on dig timeout on r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Change check interval in _update record function (bsc#1140874)
  * aws-vpc-route53: Remove unecessary tabs (bsc#1140874)
  * aws-vpc-route53: Normalize variable declaration (bsc#1140874)
  * aws-vpc-route53: Changed log line wording on r53_stop function (bsc#1140874)
  * aws-vpc-route53: Add --cli-connect-timeout 10 option to AWS CLI (bsc#1140874)
  * aws-vpc-route53: Add extra log line to r53_start function (bsc#1140874)
  * aws-vpc-route53: Replace ec2metada with curl to fetch the IP address directly from EC2 metadata (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_start function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_stop function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to _update_record function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Add binary check for curl and dig (bsc#1140874)
  * aws-vpc-route53: Change in function names from ec2ip_* to r53_* (bsc#1140874)
  * aws-vpc-route53.in: Add missing quotes in ec2ip_stop() (bsc#1140874)
  * Filesystem: remove removed notify-action from metadata
  * Use _default variables in ZFS RA.
  * Use _default variables in Xinetd RA.
  * Use _default variables in Xen RA.
  * Use _default variables in WinPopup RA.
  * Use _default variables in vsftpd RA.
  * Use _default variables in VirtualDomain RA.
  * Use _default variables in VIPArip RA.
  * Use _default variables in varnish RA.
  * Use _default variables in tomcat RA.
  * Use _default variables in syslog-ng RA.
  * Use _default variables in SysInfo RA.
  * Use _default variables in Stateful RA.
  * Use _default variables in Squid RA.
  * Use _default variables in SphinxSearchDaemon RA.
  * Use _default variables in slapd RA.
  * Use _default variables in sg_persist RA.
  * Use _default variables in sfex RA.
  * Use _default variables in ServeRAID RA.
  * Use _default variables in SendArp RA.
  * Use _default variables in scsi2reservation RA.
  * Use _default variables in SAPInstance RA.
  * Use _default variables in SAPDatabase RA.
  * Use _default variables in rsyslog RA.
  * Use _default variables in rsyncd RA.
  * Use _default variables in Route RA.
  * Use _default variables in redis RA.
  * Use _default variables in Raid1 RA.
  * Use _default variables in rabbitmq-cluster RA.
  * Use _default variables in Pure-FTPd RA.
  * Use _default variables in proftpd RA.
  * Use _default variables in pound RA.
  * Use _default variables in postfix RA.
  * Use _default variables in portblock RA.
  * Use _default variables in podman RA.
  * Use _default variables in pingd RA.
  * Use _default variables in pgsql RA.
  * Use _default variables in ovsmonitor RA.
  * Use _default variables in oralsnr RA.
  * Use _default variables in oracle RA.
  * Use _default variables in oraasm RA.
  * Use _default variables in openstack-info RA.
  * Use _default variables in NodeUtilization RA.
  * Use _default variables in nginx RA.
  * Use _default variables in nfsnotify RA.
  * Use _default variables in mysql-proxy RA.
  * Use _default variables in ManageVE RA.
  * Use _default variables in ManageRAID RA.
  * Use _default variables in MailTo RA.
  * Use _default variables in machine-info RA.
  * Use _default variables in lxd-info RA.
  * Use _default variables in lxc RA.
  * Use _default variables in lvmlockd RA.
  * Use _default variables in LVM-activate RA.
  * Use _default variables in LVM RA.
  * Use _default variables in LinuxSCSI RA.
  * Use _default variables in jira RA.
  * Use _default variables in jboss RA.
  * Use _default variables in iSCSITarget RA.
  * Use _default variables in iSCSILogicalUnit RA.
  * Use _default variables in IPsrcaddr RA.
  * Use _default variables in ipsec RA.
  * Use _default variables in IPaddr2 RA.
  * Use _default variables in IPaddr RA.
  * Use _default variables in iface-vlan RA.
  * Use _default variables in ids RA.
  * Use _default variables in ICP RA.
  * Use _default variables in garbd RA.
  * Use _default variables in galera RA.
  * Use _default variables in fio RA.
  * Use _default variables in Filesystem RA.
  * Use _default variables in EvmsSCC RA.
  * Use _default variables in Evmsd RA.
  * Use _default variables in ethmonitor RA.
  * Use _default variables in eDir88 RA.
  * Use _default variables in Dummy RA.
  * Use _default variables in docker RA.
  * Use _default variables in dnsupdate RA.
  * Use _default variables in Delay RA.
  * Use _default variables in db2 RA.
  * Use _default variables in CTDB RA.
  * Use _default variables in clvm RA.
  * Use _default variables in ClusterMon RA.
  * Use _default variables in aws-vpc-move-ip RA.
  * Use _default variables in apache RA.
  * Use _default variables in aliyun-vpc-move-ip RA.
- Remove 0007-CTDB-support-Samba-4.9.patch
  * This patch was merged upstream.</changelog>
  <changelog author="varkoly@suse.com" date="1568030400">- Update to version 4.3.0+git161.00cb192d:
  * apache: correctly detect mod_status.so when statusurl is set
    (bsc#1138281)
  * Restore users/perms/policies even if starting in a single node mode
  * spec: use %{?centos} as _version doesnt work on newer CentOS versions
  * exportfs: doc clarification for clientspec format
  * Fixup docker_stop condition on error
  * Make the check for the docker daemon being up more robust
  * Low: oracle-common: Delete the ORACLE_HOME check that is no longer needed because it is checked first.
  * Low: ora-common: Properly output message when sid parameter is invalid.
  * spec: updates from Fedora
  * spec: update to BR to libnet-devel for opensuse
  * CI: "make rpm" fixes
  * Route: dont fence node when parameters arent set
  * requested changes applied.
  * Added support for SSL replication
  * [build] drop now unnecessary make distcheck options
  * [build] allow systemd files to be installed in non-standard location
  * [build] fix make distcheck by adding fallback OS dir to find docbook.xsl
  * Don't call readlink on path if it does not exist</changelog>
  <changelog author="dakechi@suse.com" date="1569844800">- Update to version 4.3.0+git178.b102c209:
  * Adapt azure-lb Resource Agent to support socat usage too (bsc#1150046)
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * nfsserver: use "--no-legend" for systemctl "list-unit-files" calls
  * nfsserver: performance improvements for systemd enabled systems
  * IPaddr2: IPv6 return empty string when sanitation fails
  * Low: IPaddr2: fix to work properly with unsanitized IPv6 addresses
  * Filesystem: improve "/" check for bind mounts
  * IPsrcaddr: add destination and table parameters</changelog>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1621944000">- Update to version 4.8.0+git30.d0077df0:
  (bsc#1178680) HA-LVM systemid race condition introduces an error "active on 2 nodes"
  (bsc#1183971) L3: azure-events puts both nodes in standby
  (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
  (bsc#1180590) azure-events URLError fixed upstream
  (bsc#1184607) gcp-vpc-move-route resource agent file_cache is unavailable when using oauth2client
  (bsc#1179977) L3: anything RA stop operation fails if /root/.profile has unexpected content
  * Low: dummy: Add missing action to dummy_usage function
  * LVM-activate: Disable VG autoactivation in system_id access_mode
  * gcp-vpc-move-vip.in: Adds retries
  * gcp-ilb: resource wrapping nc or socat to respond to health checks (#1541)
  * azure-events: update api_version
  * openstack-cinder-volume: CLI output parsing fixes, fetch of node ID consistency, monitor action simplification, and proper use of osvol_validate.
  * openstack-virtual-ip: New resource agent for virtual IP support in OpenStack.
  * openstack-floating-ip: Proper use of osflip_validate and small log message fixes.
  * configure: add /usr/local/share to fallback path to be scanned for docbook path
  * openstack-info: Use OSInfo_validate in start action. (#1639)
  * openstack-info: python variable substitution and test for json
  * VirtualDomain: ensure needed virtual storage pools and networks are up and refreshed
  * db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
  * - Updates due to API output format changes. - Attempt to future-proof parsing of the output.
  * update aws-vpc-route53
  * build: add smb-share and fix &amp; not passing XML check/manpage generation
  * smb-share: new RA to manage Samba shares on the fly. (#1628)
  * build: update ChangeLog for 4.8.0
  * podman: return OCF_NOT_RUNNING when monitor cmd fails (not running)
  * bundle: run crm_mon without performing validation
  * awsvip: dont partially match similar IPs during monitor-action
  * AWS agents: dont spam log files when getting token
  * build: update ChangeLog for 4.8.0-rc1
  * build: update ChangeLog for 4.7.0
  * ci/build.sh: skip Python agents and *.in
  * CI: run shellcheck tests during "make check" to move from Travis CI
  * Filesystem: fix force_unmount default to safe for RHEL9+ issue introduced in b792a143fc90468f8911243a5ea77c0c424bd624
  * azure-lb: Redirect stdout and stderr to /dev/null
  * azure-lb: Be quiet during stop operation
  * configure: dont use OCF_ROOT_DIR from glue.h
  * docker-compose: Bugfix handle ymls correctly
  * Filesystem: change force_unmount default to safe for RHEL9+
  * gcp-vpc-move-route: make "vpc_network" optional
  * VirtualDomain: fix pid_status() on EL8 (#1614)
  * spec: add BuildRequires for google lib
  * nfsserver: Error-check unbind_tree
  * gcp-vpc-move-vip: correctly return error when no instances are returned
  * gcp-vpc-move-route: fix stop-action when route stopped, and fix check_conflicting_routes()
  * The anything RA getpid() function can fail to return the pid in the OCF_RESKEY_pidfile if the root user has commands in .profile which prints numeric characters. To demonstrate, /root/.profile contains: echo -e '911 WARNING: YOU ARE SUPERUSER!' Write only the pid into the pidfile.
  * added real servers threshold settings to ldirectord
  * gcp-vpc-move-route, gcp-vpc-move-vip: Parameterize project ID
  * nfsclient: fix stop-action when export not present
  * heartbeat/Route: Return OCF_NOT_RUNNING status if iface doesn't exist.
  * pgsql: make wal receiver check compatible with PostgreSQL &gt;= 11
  * Low: mysql-common: check datadir permissions
  * ocf-shellfuncs: make ocf_is_bash4() detect Bash v4 or greater (which it was supposed to according to the comments)
  * Dev: ocft: fix OCF_RESKEY_CRM_meta_timeout
  * build: update ChangeLog for 4.7.0-rc1
  * crypt: avoid failing for LVM exclusive by not running full sanity check during probes
  * LVM-activate: Fix return value in lvm_status()
  * LVM-activate: Remove local variables (bashisms)
  * LVM-activate: Stop before blk-availability.service
  * ocf-distro: Use Solaris-compatible grep
  * ocf-distro: Update version format
  * ocf-distro: Improve robustness and specificity (#1558)
  * [build] export ocfrootdir consistently
  * crypt: allow encrypted_dev to be symlink to support using devices in /dev/disk/... or UUID
  * heartbeat/iface-vlan: vlan_{interface,id} do not have to be unique.
  * [build] fix systemd paths when using non standard prefix
  * crypt: make key_file and crypt_type parameters not unique
  * Asterisk dir fix (#1583)
  * fix problem with unset OCF_RESKEY_CRM_meta_interval by cluster framework
  * AWS agents: add support for IMDSv2
  * Add pkg-config file
  * configure: add PKG_CHECK_VAR.m4 to avoid failing on older distros
  * configure: use pkg-config to detect systemd-paths to make CI able to define them the same way for all CL-projects
  * isRunning_cmd fix due to improper pkill parameters
  * configure: default to build heartbeat agents only
  * podman: recover from podman's storage being out of sync
  * podman: recover from killed conmon side process
  * aws-vpc-move-ip: Don't warn for expected scenarios
  * sybaseASE: add logfile parameter
  * galera: recover after network split in a 2-node cluster
  * man: use OCF_CHECK_LEVEL for depth parameters in pcs examples
  * crypt: fix missing &amp;&amp; to set exit_reason
  * galera: set bootstrap attribute before promote
  * galera: fix check user configuration with clustercheck
  * ethmonitor: is_interface: RE matches vlan names
  * man: use promotable keyword in manpage examples
  * SAPInstance - introduce MINIMAL_PROBE resource parameter (#1564)
  * send_arp (libnet): use sigaction() instead of deprecated siginterrupt()
  * fixes and improvements
  * galera: recover from joining a non existing cluster
  * Filesystem: Default fast_stop to no for RHEL 9+ and for other distros
  * Fix ocf.py usage for py2 when self param is involved
  * galera: Fix automatic recovery when a cluster was not gracefully stopped
  * aws-vpc-move-ip: Fix the region option
  * aws-vpc-move-ip: Implemented optional eni lookup instead of the default instance id.
  * aws-vpc-move-ip: Add --region attribute
  * build: fix distcheck issue introduced by including READMEs in heartbeat directory
  * build: include all READMEs in heartbeat directory
  * spec: Recommends not supported for RHEL/CentOS 7 or older
  * - spec: ldirectord: added perl-IO-Socket-INET6 dependency on Fedora - spec: fix last remnants of 0%{?centos_version}
  * gcp-vpc-move-vip: Fix sort for list of dicts in python3
  * filesystem: mmap search not specific enough
  * galera/redis: support RHEL 8.1 pacemaker
  * galera/redis: use --output-as for crm_mon w/newer Pacemaker, and prepare for Promoted role
  * azure-events: report error if jsondata not received
  * azure-events: import URLError and encode postData when necessary
  * nfsnotify: fix SELinux issue due to newer ls versions giving additional output.
  * nfsserver: fix SELinux issue due to newer ls versions giving additional output.
  * - spec: make Samba/CIFS dependency weak for Fedora 32 and RHEL/CentOS 8 and   remove the dependency for later Fedora/RHEL/CentOS versions
  * nfsserver: stop nfsdcld if present during stop-action
  * Enable comparing versions containing git hashes and more
  * azure-events: only decode() when exec() output not of type str
  * pgsql: support RHEL 8.1 pacemaker
  * Filesystem: Convert leading space characters to tabs
  * Filesystem: POSIX-compliant syntax for portability
  * Filesystem: Support whitespace in device or directory name
  * sybaseASE: Run verify_all() for start operation only
  * iSCSILogicalUnit: lio-t: Add pscsi LIO-T backing store
  * spec: fix lsb_release dependency
  * azure-lb: Don't redirect nc listener output to pidfile
  * send_ua/IPv6addr: use sigaction() instead of deprecated siginterrupt()
  * Fix typos in galera RA
  * [gcp-vpc-move-vip] Add support for multiple alias IP ranges on one node
  * [gcp-vpc-move-vip] Improve accuracy of metadata and log messages
  * docker-compose: bugfix (#1523)
  * mdraid: fix bashism
  * build: update ChangeLog for 4.6.1
  * dummypy: make Python 2 compatible
  * dummypy: build fixes to generate the agent from the .in and generate manpage
  * build: update ChangeLog for 4.6.0
  * pgsql: use XML output for better backward and forward compatibility, and "Promoted" keyword to be ready for Pacemaker 2.1
  * build: fix failing to link if link already exists
  * ocf_is_ms(): also check OCF_RESKEY_CRM_meta_promotable to make it work w/Pacemaker 2.x
  * ldirectord: add support for ldaps
  * exportfs: fix ocft script failure
  * exportfs: fix bashism
  * aws-vpc-move-ip: fix bashism
  * aliyun-vpc-move-ip: fix bashism
  * podman: fix bashism
  * docker-compose: fix bashism
  * mdraid: fix bashism
  * crypt: fix bashism
  * Filesystem: set "fast_stop" default to "no" for GFS2 filesystems as they are likely to use more than 6 seconds to stop
  * build: update ChangeLog for 4.6.0-rc1
  * Fix _default variables in clvm RA.
  * exportfs: fix monitor-action in symlink-logic for when directory doesnt exist
  * nfsserver: prevent error messages when /etc/sysconfig/nfs does not exist
  * aliyun-vpc-move-ip: Add error log output (#1504)
  * High: docker-compose: new resource agent (#1499)
  * podman: make sure to remove containers with lingering exec sessions
  * tomcat: only create directory during start action
  * gcp-pd-move: fixes and improvements
  * nfsserver: fix NFSv4-only support
  * Medium: Squid: made squid_opts parameter available.
  * azure-events: handle exceptions in urlopen (#1496)
  * db2: HADR add STANDBY/REMOTE_CATCHUP_PENDING/DISCONNECTED to correctly promote standby node when master node disappears (e.g. via fencing)
  * Increase the rabbitmqctl wait timeout during start()
  * exportfs: add symlink support
  * Dummy RA in Python (#1490)
  * Eliminated logging.basicConfig() That method installed a root logger to be used with logging methods. The root logger is a stream logger which sends output to stderr, so every log data ended up in stderr as well
  * pgsql: support to crm_mon output for Pacemaker-2.0.3.
  * Replace aws command line with OCF_RESKEY_awscli property. (#1483)
  * mdraid: new resource agent
  * crypt: new resource agent (#1477)
  * Disable google api cache discovery
  * Importforce should not be a unique parameter.
  * Mid: postfix: Fixed ocf_exit_reason calling mistake.
  * Mid: dovecot: Fixed ocf_exit_reason calling mistake.
  * aws-vpc-move-ip: delete remaining route entries
  * Increase the security of monitor user in oracle
  * aws-vpc-route53: add support for public and secondary private IPs
  * aws-vpc-route53: cleanup and improvements
  * galera: Fix value used for connecting with the empty password.
  * ocf-shellfuncs: ocf_is_clone: update comment based on clone-max fix in previous commit
  * Fix audit issue with secure tmp file (#1468)
  * ocf-shellfuncs: fix ocf_is_clone() (clone_max can be 0 with cloned resources)
  * Make secure tmp files (#1467)
  * redis: run validate-action during start
  * Filesystem: Add lustre as networked filesystem
  * build: update ChangeLog for 4.5.0
  * aws-vpc-move-ip: add routing_table_role parameter to metadata
  * iSCSILogicalUnit: fix default value for OCF_RESKEY_liot_bstype
  * build: update ChangeLog for 4.5.0-rc1
  * lvmlockd: remove locking_type parameter from lvm.conf for LVM &gt; v2.03
  * Allow user to specify role with which to query/update route table
  * Add support for LIO-T incoming CHAP auth for TPG
- Remove patches applied in the update:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
  enable-git-hashes-in-versions.patch
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
</package>
<package pkgid="f6f389c502ebc12d6762e594bfa69c30367b9f53922223021f2629228322e44d" name="ldirectord" arch="ppc64le">
  <version epoch="0" ver="4.8.0+git30.d0077df0" rel="8.5.1"/>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="ddiss@suse.com" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="dakechi@suse.com" date="1565784000">- Update to version 4.3.0+git131.7af8c368:
  * mysql/mariadb/galera: use runuser/su to avoid using SELinux DAC_OVERRIDE
  * Generate addition drop-in dependencies for podman containers
  * Delay: protect grep regex argument from shell globbing
  * ipsec: fix bashism; [ a == b ] -&gt; [ a = b ]
  * changing bashism to generic solution
  * iSCSILogicalUnit: only create acls if it doesnt exist
  * LVM-activate: fix monitor might hang due to lvm_validate which was added by accident
  * check if mod_status is present in configuration
  * Load apache status modules from RA cmdline for SUSE only OS (bsc#1138281)
  * Improve PidFile pattern
  * CTDB: drop sysconfig presence check during validate
  * CTDB: generate script.options file for 4.9+
  * podman: only use exec to manage container's lifecycle
  * Fix path to example for ocf python agent
  * CTDB: support Samba 4.9+ (bsc#1137130)
  * Medium: Filesystem: Prevents to all root user processes are killed when bind mounting a directory on rootfs.
  * aws-vpc-route53: Removed absolute path for awk command (bsc#1140874)
  * aws-vpc-route53: Tuning on dig timeout on r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Change check interval in _update record function (bsc#1140874)
  * aws-vpc-route53: Remove unecessary tabs (bsc#1140874)
  * aws-vpc-route53: Normalize variable declaration (bsc#1140874)
  * aws-vpc-route53: Changed log line wording on r53_stop function (bsc#1140874)
  * aws-vpc-route53: Add --cli-connect-timeout 10 option to AWS CLI (bsc#1140874)
  * aws-vpc-route53: Add extra log line to r53_start function (bsc#1140874)
  * aws-vpc-route53: Replace ec2metada with curl to fetch the IP address directly from EC2 metadata (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_start function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_stop function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to _update_record function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Add binary check for curl and dig (bsc#1140874)
  * aws-vpc-route53: Change in function names from ec2ip_* to r53_* (bsc#1140874)
  * aws-vpc-route53.in: Add missing quotes in ec2ip_stop() (bsc#1140874)
  * Filesystem: remove removed notify-action from metadata
  * Use _default variables in ZFS RA.
  * Use _default variables in Xinetd RA.
  * Use _default variables in Xen RA.
  * Use _default variables in WinPopup RA.
  * Use _default variables in vsftpd RA.
  * Use _default variables in VirtualDomain RA.
  * Use _default variables in VIPArip RA.
  * Use _default variables in varnish RA.
  * Use _default variables in tomcat RA.
  * Use _default variables in syslog-ng RA.
  * Use _default variables in SysInfo RA.
  * Use _default variables in Stateful RA.
  * Use _default variables in Squid RA.
  * Use _default variables in SphinxSearchDaemon RA.
  * Use _default variables in slapd RA.
  * Use _default variables in sg_persist RA.
  * Use _default variables in sfex RA.
  * Use _default variables in ServeRAID RA.
  * Use _default variables in SendArp RA.
  * Use _default variables in scsi2reservation RA.
  * Use _default variables in SAPInstance RA.
  * Use _default variables in SAPDatabase RA.
  * Use _default variables in rsyslog RA.
  * Use _default variables in rsyncd RA.
  * Use _default variables in Route RA.
  * Use _default variables in redis RA.
  * Use _default variables in Raid1 RA.
  * Use _default variables in rabbitmq-cluster RA.
  * Use _default variables in Pure-FTPd RA.
  * Use _default variables in proftpd RA.
  * Use _default variables in pound RA.
  * Use _default variables in postfix RA.
  * Use _default variables in portblock RA.
  * Use _default variables in podman RA.
  * Use _default variables in pingd RA.
  * Use _default variables in pgsql RA.
  * Use _default variables in ovsmonitor RA.
  * Use _default variables in oralsnr RA.
  * Use _default variables in oracle RA.
  * Use _default variables in oraasm RA.
  * Use _default variables in openstack-info RA.
  * Use _default variables in NodeUtilization RA.
  * Use _default variables in nginx RA.
  * Use _default variables in nfsnotify RA.
  * Use _default variables in mysql-proxy RA.
  * Use _default variables in ManageVE RA.
  * Use _default variables in ManageRAID RA.
  * Use _default variables in MailTo RA.
  * Use _default variables in machine-info RA.
  * Use _default variables in lxd-info RA.
  * Use _default variables in lxc RA.
  * Use _default variables in lvmlockd RA.
  * Use _default variables in LVM-activate RA.
  * Use _default variables in LVM RA.
  * Use _default variables in LinuxSCSI RA.
  * Use _default variables in jira RA.
  * Use _default variables in jboss RA.
  * Use _default variables in iSCSITarget RA.
  * Use _default variables in iSCSILogicalUnit RA.
  * Use _default variables in IPsrcaddr RA.
  * Use _default variables in ipsec RA.
  * Use _default variables in IPaddr2 RA.
  * Use _default variables in IPaddr RA.
  * Use _default variables in iface-vlan RA.
  * Use _default variables in ids RA.
  * Use _default variables in ICP RA.
  * Use _default variables in garbd RA.
  * Use _default variables in galera RA.
  * Use _default variables in fio RA.
  * Use _default variables in Filesystem RA.
  * Use _default variables in EvmsSCC RA.
  * Use _default variables in Evmsd RA.
  * Use _default variables in ethmonitor RA.
  * Use _default variables in eDir88 RA.
  * Use _default variables in Dummy RA.
  * Use _default variables in docker RA.
  * Use _default variables in dnsupdate RA.
  * Use _default variables in Delay RA.
  * Use _default variables in db2 RA.
  * Use _default variables in CTDB RA.
  * Use _default variables in clvm RA.
  * Use _default variables in ClusterMon RA.
  * Use _default variables in aws-vpc-move-ip RA.
  * Use _default variables in apache RA.
  * Use _default variables in aliyun-vpc-move-ip RA.
- Remove 0007-CTDB-support-Samba-4.9.patch
  * This patch was merged upstream.</changelog>
  <changelog author="varkoly@suse.com" date="1568030400">- Update to version 4.3.0+git161.00cb192d:
  * apache: correctly detect mod_status.so when statusurl is set
    (bsc#1138281)
  * Restore users/perms/policies even if starting in a single node mode
  * spec: use %{?centos} as _version doesnt work on newer CentOS versions
  * exportfs: doc clarification for clientspec format
  * Fixup docker_stop condition on error
  * Make the check for the docker daemon being up more robust
  * Low: oracle-common: Delete the ORACLE_HOME check that is no longer needed because it is checked first.
  * Low: ora-common: Properly output message when sid parameter is invalid.
  * spec: updates from Fedora
  * spec: update to BR to libnet-devel for opensuse
  * CI: "make rpm" fixes
  * Route: dont fence node when parameters arent set
  * requested changes applied.
  * Added support for SSL replication
  * [build] drop now unnecessary make distcheck options
  * [build] allow systemd files to be installed in non-standard location
  * [build] fix make distcheck by adding fallback OS dir to find docbook.xsl
  * Don't call readlink on path if it does not exist</changelog>
  <changelog author="dakechi@suse.com" date="1569844800">- Update to version 4.3.0+git178.b102c209:
  * Adapt azure-lb Resource Agent to support socat usage too (bsc#1150046)
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * nfsserver: use "--no-legend" for systemctl "list-unit-files" calls
  * nfsserver: performance improvements for systemd enabled systems
  * IPaddr2: IPv6 return empty string when sanitation fails
  * Low: IPaddr2: fix to work properly with unsanitized IPv6 addresses
  * Filesystem: improve "/" check for bind mounts
  * IPsrcaddr: add destination and table parameters</changelog>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1621944000">- Update to version 4.8.0+git30.d0077df0:
  (bsc#1178680) HA-LVM systemid race condition introduces an error "active on 2 nodes"
  (bsc#1183971) L3: azure-events puts both nodes in standby
  (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
  (bsc#1180590) azure-events URLError fixed upstream
  (bsc#1184607) gcp-vpc-move-route resource agent file_cache is unavailable when using oauth2client
  (bsc#1179977) L3: anything RA stop operation fails if /root/.profile has unexpected content
  * Low: dummy: Add missing action to dummy_usage function
  * LVM-activate: Disable VG autoactivation in system_id access_mode
  * gcp-vpc-move-vip.in: Adds retries
  * gcp-ilb: resource wrapping nc or socat to respond to health checks (#1541)
  * azure-events: update api_version
  * openstack-cinder-volume: CLI output parsing fixes, fetch of node ID consistency, monitor action simplification, and proper use of osvol_validate.
  * openstack-virtual-ip: New resource agent for virtual IP support in OpenStack.
  * openstack-floating-ip: Proper use of osflip_validate and small log message fixes.
  * configure: add /usr/local/share to fallback path to be scanned for docbook path
  * openstack-info: Use OSInfo_validate in start action. (#1639)
  * openstack-info: python variable substitution and test for json
  * VirtualDomain: ensure needed virtual storage pools and networks are up and refreshed
  * db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
  * - Updates due to API output format changes. - Attempt to future-proof parsing of the output.
  * update aws-vpc-route53
  * build: add smb-share and fix &amp; not passing XML check/manpage generation
  * smb-share: new RA to manage Samba shares on the fly. (#1628)
  * build: update ChangeLog for 4.8.0
  * podman: return OCF_NOT_RUNNING when monitor cmd fails (not running)
  * bundle: run crm_mon without performing validation
  * awsvip: dont partially match similar IPs during monitor-action
  * AWS agents: dont spam log files when getting token
  * build: update ChangeLog for 4.8.0-rc1
  * build: update ChangeLog for 4.7.0
  * ci/build.sh: skip Python agents and *.in
  * CI: run shellcheck tests during "make check" to move from Travis CI
  * Filesystem: fix force_unmount default to safe for RHEL9+ issue introduced in b792a143fc90468f8911243a5ea77c0c424bd624
  * azure-lb: Redirect stdout and stderr to /dev/null
  * azure-lb: Be quiet during stop operation
  * configure: dont use OCF_ROOT_DIR from glue.h
  * docker-compose: Bugfix handle ymls correctly
  * Filesystem: change force_unmount default to safe for RHEL9+
  * gcp-vpc-move-route: make "vpc_network" optional
  * VirtualDomain: fix pid_status() on EL8 (#1614)
  * spec: add BuildRequires for google lib
  * nfsserver: Error-check unbind_tree
  * gcp-vpc-move-vip: correctly return error when no instances are returned
  * gcp-vpc-move-route: fix stop-action when route stopped, and fix check_conflicting_routes()
  * The anything RA getpid() function can fail to return the pid in the OCF_RESKEY_pidfile if the root user has commands in .profile which prints numeric characters. To demonstrate, /root/.profile contains: echo -e '911 WARNING: YOU ARE SUPERUSER!' Write only the pid into the pidfile.
  * added real servers threshold settings to ldirectord
  * gcp-vpc-move-route, gcp-vpc-move-vip: Parameterize project ID
  * nfsclient: fix stop-action when export not present
  * heartbeat/Route: Return OCF_NOT_RUNNING status if iface doesn't exist.
  * pgsql: make wal receiver check compatible with PostgreSQL &gt;= 11
  * Low: mysql-common: check datadir permissions
  * ocf-shellfuncs: make ocf_is_bash4() detect Bash v4 or greater (which it was supposed to according to the comments)
  * Dev: ocft: fix OCF_RESKEY_CRM_meta_timeout
  * build: update ChangeLog for 4.7.0-rc1
  * crypt: avoid failing for LVM exclusive by not running full sanity check during probes
  * LVM-activate: Fix return value in lvm_status()
  * LVM-activate: Remove local variables (bashisms)
  * LVM-activate: Stop before blk-availability.service
  * ocf-distro: Use Solaris-compatible grep
  * ocf-distro: Update version format
  * ocf-distro: Improve robustness and specificity (#1558)
  * [build] export ocfrootdir consistently
  * crypt: allow encrypted_dev to be symlink to support using devices in /dev/disk/... or UUID
  * heartbeat/iface-vlan: vlan_{interface,id} do not have to be unique.
  * [build] fix systemd paths when using non standard prefix
  * crypt: make key_file and crypt_type parameters not unique
  * Asterisk dir fix (#1583)
  * fix problem with unset OCF_RESKEY_CRM_meta_interval by cluster framework
  * AWS agents: add support for IMDSv2
  * Add pkg-config file
  * configure: add PKG_CHECK_VAR.m4 to avoid failing on older distros
  * configure: use pkg-config to detect systemd-paths to make CI able to define them the same way for all CL-projects
  * isRunning_cmd fix due to improper pkill parameters
  * configure: default to build heartbeat agents only
  * podman: recover from podman's storage being out of sync
  * podman: recover from killed conmon side process
  * aws-vpc-move-ip: Don't warn for expected scenarios
  * sybaseASE: add logfile parameter
  * galera: recover after network split in a 2-node cluster
  * man: use OCF_CHECK_LEVEL for depth parameters in pcs examples
  * crypt: fix missing &amp;&amp; to set exit_reason
  * galera: set bootstrap attribute before promote
  * galera: fix check user configuration with clustercheck
  * ethmonitor: is_interface: RE matches vlan names
  * man: use promotable keyword in manpage examples
  * SAPInstance - introduce MINIMAL_PROBE resource parameter (#1564)
  * send_arp (libnet): use sigaction() instead of deprecated siginterrupt()
  * fixes and improvements
  * galera: recover from joining a non existing cluster
  * Filesystem: Default fast_stop to no for RHEL 9+ and for other distros
  * Fix ocf.py usage for py2 when self param is involved
  * galera: Fix automatic recovery when a cluster was not gracefully stopped
  * aws-vpc-move-ip: Fix the region option
  * aws-vpc-move-ip: Implemented optional eni lookup instead of the default instance id.
  * aws-vpc-move-ip: Add --region attribute
  * build: fix distcheck issue introduced by including READMEs in heartbeat directory
  * build: include all READMEs in heartbeat directory
  * spec: Recommends not supported for RHEL/CentOS 7 or older
  * - spec: ldirectord: added perl-IO-Socket-INET6 dependency on Fedora - spec: fix last remnants of 0%{?centos_version}
  * gcp-vpc-move-vip: Fix sort for list of dicts in python3
  * filesystem: mmap search not specific enough
  * galera/redis: support RHEL 8.1 pacemaker
  * galera/redis: use --output-as for crm_mon w/newer Pacemaker, and prepare for Promoted role
  * azure-events: report error if jsondata not received
  * azure-events: import URLError and encode postData when necessary
  * nfsnotify: fix SELinux issue due to newer ls versions giving additional output.
  * nfsserver: fix SELinux issue due to newer ls versions giving additional output.
  * - spec: make Samba/CIFS dependency weak for Fedora 32 and RHEL/CentOS 8 and   remove the dependency for later Fedora/RHEL/CentOS versions
  * nfsserver: stop nfsdcld if present during stop-action
  * Enable comparing versions containing git hashes and more
  * azure-events: only decode() when exec() output not of type str
  * pgsql: support RHEL 8.1 pacemaker
  * Filesystem: Convert leading space characters to tabs
  * Filesystem: POSIX-compliant syntax for portability
  * Filesystem: Support whitespace in device or directory name
  * sybaseASE: Run verify_all() for start operation only
  * iSCSILogicalUnit: lio-t: Add pscsi LIO-T backing store
  * spec: fix lsb_release dependency
  * azure-lb: Don't redirect nc listener output to pidfile
  * send_ua/IPv6addr: use sigaction() instead of deprecated siginterrupt()
  * Fix typos in galera RA
  * [gcp-vpc-move-vip] Add support for multiple alias IP ranges on one node
  * [gcp-vpc-move-vip] Improve accuracy of metadata and log messages
  * docker-compose: bugfix (#1523)
  * mdraid: fix bashism
  * build: update ChangeLog for 4.6.1
  * dummypy: make Python 2 compatible
  * dummypy: build fixes to generate the agent from the .in and generate manpage
  * build: update ChangeLog for 4.6.0
  * pgsql: use XML output for better backward and forward compatibility, and "Promoted" keyword to be ready for Pacemaker 2.1
  * build: fix failing to link if link already exists
  * ocf_is_ms(): also check OCF_RESKEY_CRM_meta_promotable to make it work w/Pacemaker 2.x
  * ldirectord: add support for ldaps
  * exportfs: fix ocft script failure
  * exportfs: fix bashism
  * aws-vpc-move-ip: fix bashism
  * aliyun-vpc-move-ip: fix bashism
  * podman: fix bashism
  * docker-compose: fix bashism
  * mdraid: fix bashism
  * crypt: fix bashism
  * Filesystem: set "fast_stop" default to "no" for GFS2 filesystems as they are likely to use more than 6 seconds to stop
  * build: update ChangeLog for 4.6.0-rc1
  * Fix _default variables in clvm RA.
  * exportfs: fix monitor-action in symlink-logic for when directory doesnt exist
  * nfsserver: prevent error messages when /etc/sysconfig/nfs does not exist
  * aliyun-vpc-move-ip: Add error log output (#1504)
  * High: docker-compose: new resource agent (#1499)
  * podman: make sure to remove containers with lingering exec sessions
  * tomcat: only create directory during start action
  * gcp-pd-move: fixes and improvements
  * nfsserver: fix NFSv4-only support
  * Medium: Squid: made squid_opts parameter available.
  * azure-events: handle exceptions in urlopen (#1496)
  * db2: HADR add STANDBY/REMOTE_CATCHUP_PENDING/DISCONNECTED to correctly promote standby node when master node disappears (e.g. via fencing)
  * Increase the rabbitmqctl wait timeout during start()
  * exportfs: add symlink support
  * Dummy RA in Python (#1490)
  * Eliminated logging.basicConfig() That method installed a root logger to be used with logging methods. The root logger is a stream logger which sends output to stderr, so every log data ended up in stderr as well
  * pgsql: support to crm_mon output for Pacemaker-2.0.3.
  * Replace aws command line with OCF_RESKEY_awscli property. (#1483)
  * mdraid: new resource agent
  * crypt: new resource agent (#1477)
  * Disable google api cache discovery
  * Importforce should not be a unique parameter.
  * Mid: postfix: Fixed ocf_exit_reason calling mistake.
  * Mid: dovecot: Fixed ocf_exit_reason calling mistake.
  * aws-vpc-move-ip: delete remaining route entries
  * Increase the security of monitor user in oracle
  * aws-vpc-route53: add support for public and secondary private IPs
  * aws-vpc-route53: cleanup and improvements
  * galera: Fix value used for connecting with the empty password.
  * ocf-shellfuncs: ocf_is_clone: update comment based on clone-max fix in previous commit
  * Fix audit issue with secure tmp file (#1468)
  * ocf-shellfuncs: fix ocf_is_clone() (clone_max can be 0 with cloned resources)
  * Make secure tmp files (#1467)
  * redis: run validate-action during start
  * Filesystem: Add lustre as networked filesystem
  * build: update ChangeLog for 4.5.0
  * aws-vpc-move-ip: add routing_table_role parameter to metadata
  * iSCSILogicalUnit: fix default value for OCF_RESKEY_liot_bstype
  * build: update ChangeLog for 4.5.0-rc1
  * lvmlockd: remove locking_type parameter from lvm.conf for LVM &gt; v2.03
  * Allow user to specify role with which to query/update route table
  * Add support for LIO-T incoming CHAP auth for TPG
- Remove patches applied in the update:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
  enable-git-hashes-in-versions.patch
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
</package>
<package pkgid="227ec0a2be284311b364315d118deccc02cdfc75f5251d7bf8f2bb317ffc800c" name="ldirectord" arch="s390x">
  <version epoch="0" ver="4.8.0+git30.d0077df0" rel="8.5.1"/>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="ddiss@suse.com" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="dakechi@suse.com" date="1565784000">- Update to version 4.3.0+git131.7af8c368:
  * mysql/mariadb/galera: use runuser/su to avoid using SELinux DAC_OVERRIDE
  * Generate addition drop-in dependencies for podman containers
  * Delay: protect grep regex argument from shell globbing
  * ipsec: fix bashism; [ a == b ] -&gt; [ a = b ]
  * changing bashism to generic solution
  * iSCSILogicalUnit: only create acls if it doesnt exist
  * LVM-activate: fix monitor might hang due to lvm_validate which was added by accident
  * check if mod_status is present in configuration
  * Load apache status modules from RA cmdline for SUSE only OS (bsc#1138281)
  * Improve PidFile pattern
  * CTDB: drop sysconfig presence check during validate
  * CTDB: generate script.options file for 4.9+
  * podman: only use exec to manage container's lifecycle
  * Fix path to example for ocf python agent
  * CTDB: support Samba 4.9+ (bsc#1137130)
  * Medium: Filesystem: Prevents to all root user processes are killed when bind mounting a directory on rootfs.
  * aws-vpc-route53: Removed absolute path for awk command (bsc#1140874)
  * aws-vpc-route53: Tuning on dig timeout on r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Change check interval in _update record function (bsc#1140874)
  * aws-vpc-route53: Remove unecessary tabs (bsc#1140874)
  * aws-vpc-route53: Normalize variable declaration (bsc#1140874)
  * aws-vpc-route53: Changed log line wording on r53_stop function (bsc#1140874)
  * aws-vpc-route53: Add --cli-connect-timeout 10 option to AWS CLI (bsc#1140874)
  * aws-vpc-route53: Add extra log line to r53_start function (bsc#1140874)
  * aws-vpc-route53: Replace ec2metada with curl to fetch the IP address directly from EC2 metadata (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_start function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_stop function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to _update_record function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Add binary check for curl and dig (bsc#1140874)
  * aws-vpc-route53: Change in function names from ec2ip_* to r53_* (bsc#1140874)
  * aws-vpc-route53.in: Add missing quotes in ec2ip_stop() (bsc#1140874)
  * Filesystem: remove removed notify-action from metadata
  * Use _default variables in ZFS RA.
  * Use _default variables in Xinetd RA.
  * Use _default variables in Xen RA.
  * Use _default variables in WinPopup RA.
  * Use _default variables in vsftpd RA.
  * Use _default variables in VirtualDomain RA.
  * Use _default variables in VIPArip RA.
  * Use _default variables in varnish RA.
  * Use _default variables in tomcat RA.
  * Use _default variables in syslog-ng RA.
  * Use _default variables in SysInfo RA.
  * Use _default variables in Stateful RA.
  * Use _default variables in Squid RA.
  * Use _default variables in SphinxSearchDaemon RA.
  * Use _default variables in slapd RA.
  * Use _default variables in sg_persist RA.
  * Use _default variables in sfex RA.
  * Use _default variables in ServeRAID RA.
  * Use _default variables in SendArp RA.
  * Use _default variables in scsi2reservation RA.
  * Use _default variables in SAPInstance RA.
  * Use _default variables in SAPDatabase RA.
  * Use _default variables in rsyslog RA.
  * Use _default variables in rsyncd RA.
  * Use _default variables in Route RA.
  * Use _default variables in redis RA.
  * Use _default variables in Raid1 RA.
  * Use _default variables in rabbitmq-cluster RA.
  * Use _default variables in Pure-FTPd RA.
  * Use _default variables in proftpd RA.
  * Use _default variables in pound RA.
  * Use _default variables in postfix RA.
  * Use _default variables in portblock RA.
  * Use _default variables in podman RA.
  * Use _default variables in pingd RA.
  * Use _default variables in pgsql RA.
  * Use _default variables in ovsmonitor RA.
  * Use _default variables in oralsnr RA.
  * Use _default variables in oracle RA.
  * Use _default variables in oraasm RA.
  * Use _default variables in openstack-info RA.
  * Use _default variables in NodeUtilization RA.
  * Use _default variables in nginx RA.
  * Use _default variables in nfsnotify RA.
  * Use _default variables in mysql-proxy RA.
  * Use _default variables in ManageVE RA.
  * Use _default variables in ManageRAID RA.
  * Use _default variables in MailTo RA.
  * Use _default variables in machine-info RA.
  * Use _default variables in lxd-info RA.
  * Use _default variables in lxc RA.
  * Use _default variables in lvmlockd RA.
  * Use _default variables in LVM-activate RA.
  * Use _default variables in LVM RA.
  * Use _default variables in LinuxSCSI RA.
  * Use _default variables in jira RA.
  * Use _default variables in jboss RA.
  * Use _default variables in iSCSITarget RA.
  * Use _default variables in iSCSILogicalUnit RA.
  * Use _default variables in IPsrcaddr RA.
  * Use _default variables in ipsec RA.
  * Use _default variables in IPaddr2 RA.
  * Use _default variables in IPaddr RA.
  * Use _default variables in iface-vlan RA.
  * Use _default variables in ids RA.
  * Use _default variables in ICP RA.
  * Use _default variables in garbd RA.
  * Use _default variables in galera RA.
  * Use _default variables in fio RA.
  * Use _default variables in Filesystem RA.
  * Use _default variables in EvmsSCC RA.
  * Use _default variables in Evmsd RA.
  * Use _default variables in ethmonitor RA.
  * Use _default variables in eDir88 RA.
  * Use _default variables in Dummy RA.
  * Use _default variables in docker RA.
  * Use _default variables in dnsupdate RA.
  * Use _default variables in Delay RA.
  * Use _default variables in db2 RA.
  * Use _default variables in CTDB RA.
  * Use _default variables in clvm RA.
  * Use _default variables in ClusterMon RA.
  * Use _default variables in aws-vpc-move-ip RA.
  * Use _default variables in apache RA.
  * Use _default variables in aliyun-vpc-move-ip RA.
- Remove 0007-CTDB-support-Samba-4.9.patch
  * This patch was merged upstream.</changelog>
  <changelog author="varkoly@suse.com" date="1568030400">- Update to version 4.3.0+git161.00cb192d:
  * apache: correctly detect mod_status.so when statusurl is set
    (bsc#1138281)
  * Restore users/perms/policies even if starting in a single node mode
  * spec: use %{?centos} as _version doesnt work on newer CentOS versions
  * exportfs: doc clarification for clientspec format
  * Fixup docker_stop condition on error
  * Make the check for the docker daemon being up more robust
  * Low: oracle-common: Delete the ORACLE_HOME check that is no longer needed because it is checked first.
  * Low: ora-common: Properly output message when sid parameter is invalid.
  * spec: updates from Fedora
  * spec: update to BR to libnet-devel for opensuse
  * CI: "make rpm" fixes
  * Route: dont fence node when parameters arent set
  * requested changes applied.
  * Added support for SSL replication
  * [build] drop now unnecessary make distcheck options
  * [build] allow systemd files to be installed in non-standard location
  * [build] fix make distcheck by adding fallback OS dir to find docbook.xsl
  * Don't call readlink on path if it does not exist</changelog>
  <changelog author="dakechi@suse.com" date="1569844800">- Update to version 4.3.0+git178.b102c209:
  * Adapt azure-lb Resource Agent to support socat usage too (bsc#1150046)
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * nfsserver: use "--no-legend" for systemctl "list-unit-files" calls
  * nfsserver: performance improvements for systemd enabled systems
  * IPaddr2: IPv6 return empty string when sanitation fails
  * Low: IPaddr2: fix to work properly with unsanitized IPv6 addresses
  * Filesystem: improve "/" check for bind mounts
  * IPsrcaddr: add destination and table parameters</changelog>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1621944000">- Update to version 4.8.0+git30.d0077df0:
  (bsc#1178680) HA-LVM systemid race condition introduces an error "active on 2 nodes"
  (bsc#1183971) L3: azure-events puts both nodes in standby
  (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
  (bsc#1180590) azure-events URLError fixed upstream
  (bsc#1184607) gcp-vpc-move-route resource agent file_cache is unavailable when using oauth2client
  (bsc#1179977) L3: anything RA stop operation fails if /root/.profile has unexpected content
  * Low: dummy: Add missing action to dummy_usage function
  * LVM-activate: Disable VG autoactivation in system_id access_mode
  * gcp-vpc-move-vip.in: Adds retries
  * gcp-ilb: resource wrapping nc or socat to respond to health checks (#1541)
  * azure-events: update api_version
  * openstack-cinder-volume: CLI output parsing fixes, fetch of node ID consistency, monitor action simplification, and proper use of osvol_validate.
  * openstack-virtual-ip: New resource agent for virtual IP support in OpenStack.
  * openstack-floating-ip: Proper use of osflip_validate and small log message fixes.
  * configure: add /usr/local/share to fallback path to be scanned for docbook path
  * openstack-info: Use OSInfo_validate in start action. (#1639)
  * openstack-info: python variable substitution and test for json
  * VirtualDomain: ensure needed virtual storage pools and networks are up and refreshed
  * db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
  * - Updates due to API output format changes. - Attempt to future-proof parsing of the output.
  * update aws-vpc-route53
  * build: add smb-share and fix &amp; not passing XML check/manpage generation
  * smb-share: new RA to manage Samba shares on the fly. (#1628)
  * build: update ChangeLog for 4.8.0
  * podman: return OCF_NOT_RUNNING when monitor cmd fails (not running)
  * bundle: run crm_mon without performing validation
  * awsvip: dont partially match similar IPs during monitor-action
  * AWS agents: dont spam log files when getting token
  * build: update ChangeLog for 4.8.0-rc1
  * build: update ChangeLog for 4.7.0
  * ci/build.sh: skip Python agents and *.in
  * CI: run shellcheck tests during "make check" to move from Travis CI
  * Filesystem: fix force_unmount default to safe for RHEL9+ issue introduced in b792a143fc90468f8911243a5ea77c0c424bd624
  * azure-lb: Redirect stdout and stderr to /dev/null
  * azure-lb: Be quiet during stop operation
  * configure: dont use OCF_ROOT_DIR from glue.h
  * docker-compose: Bugfix handle ymls correctly
  * Filesystem: change force_unmount default to safe for RHEL9+
  * gcp-vpc-move-route: make "vpc_network" optional
  * VirtualDomain: fix pid_status() on EL8 (#1614)
  * spec: add BuildRequires for google lib
  * nfsserver: Error-check unbind_tree
  * gcp-vpc-move-vip: correctly return error when no instances are returned
  * gcp-vpc-move-route: fix stop-action when route stopped, and fix check_conflicting_routes()
  * The anything RA getpid() function can fail to return the pid in the OCF_RESKEY_pidfile if the root user has commands in .profile which prints numeric characters. To demonstrate, /root/.profile contains: echo -e '911 WARNING: YOU ARE SUPERUSER!' Write only the pid into the pidfile.
  * added real servers threshold settings to ldirectord
  * gcp-vpc-move-route, gcp-vpc-move-vip: Parameterize project ID
  * nfsclient: fix stop-action when export not present
  * heartbeat/Route: Return OCF_NOT_RUNNING status if iface doesn't exist.
  * pgsql: make wal receiver check compatible with PostgreSQL &gt;= 11
  * Low: mysql-common: check datadir permissions
  * ocf-shellfuncs: make ocf_is_bash4() detect Bash v4 or greater (which it was supposed to according to the comments)
  * Dev: ocft: fix OCF_RESKEY_CRM_meta_timeout
  * build: update ChangeLog for 4.7.0-rc1
  * crypt: avoid failing for LVM exclusive by not running full sanity check during probes
  * LVM-activate: Fix return value in lvm_status()
  * LVM-activate: Remove local variables (bashisms)
  * LVM-activate: Stop before blk-availability.service
  * ocf-distro: Use Solaris-compatible grep
  * ocf-distro: Update version format
  * ocf-distro: Improve robustness and specificity (#1558)
  * [build] export ocfrootdir consistently
  * crypt: allow encrypted_dev to be symlink to support using devices in /dev/disk/... or UUID
  * heartbeat/iface-vlan: vlan_{interface,id} do not have to be unique.
  * [build] fix systemd paths when using non standard prefix
  * crypt: make key_file and crypt_type parameters not unique
  * Asterisk dir fix (#1583)
  * fix problem with unset OCF_RESKEY_CRM_meta_interval by cluster framework
  * AWS agents: add support for IMDSv2
  * Add pkg-config file
  * configure: add PKG_CHECK_VAR.m4 to avoid failing on older distros
  * configure: use pkg-config to detect systemd-paths to make CI able to define them the same way for all CL-projects
  * isRunning_cmd fix due to improper pkill parameters
  * configure: default to build heartbeat agents only
  * podman: recover from podman's storage being out of sync
  * podman: recover from killed conmon side process
  * aws-vpc-move-ip: Don't warn for expected scenarios
  * sybaseASE: add logfile parameter
  * galera: recover after network split in a 2-node cluster
  * man: use OCF_CHECK_LEVEL for depth parameters in pcs examples
  * crypt: fix missing &amp;&amp; to set exit_reason
  * galera: set bootstrap attribute before promote
  * galera: fix check user configuration with clustercheck
  * ethmonitor: is_interface: RE matches vlan names
  * man: use promotable keyword in manpage examples
  * SAPInstance - introduce MINIMAL_PROBE resource parameter (#1564)
  * send_arp (libnet): use sigaction() instead of deprecated siginterrupt()
  * fixes and improvements
  * galera: recover from joining a non existing cluster
  * Filesystem: Default fast_stop to no for RHEL 9+ and for other distros
  * Fix ocf.py usage for py2 when self param is involved
  * galera: Fix automatic recovery when a cluster was not gracefully stopped
  * aws-vpc-move-ip: Fix the region option
  * aws-vpc-move-ip: Implemented optional eni lookup instead of the default instance id.
  * aws-vpc-move-ip: Add --region attribute
  * build: fix distcheck issue introduced by including READMEs in heartbeat directory
  * build: include all READMEs in heartbeat directory
  * spec: Recommends not supported for RHEL/CentOS 7 or older
  * - spec: ldirectord: added perl-IO-Socket-INET6 dependency on Fedora - spec: fix last remnants of 0%{?centos_version}
  * gcp-vpc-move-vip: Fix sort for list of dicts in python3
  * filesystem: mmap search not specific enough
  * galera/redis: support RHEL 8.1 pacemaker
  * galera/redis: use --output-as for crm_mon w/newer Pacemaker, and prepare for Promoted role
  * azure-events: report error if jsondata not received
  * azure-events: import URLError and encode postData when necessary
  * nfsnotify: fix SELinux issue due to newer ls versions giving additional output.
  * nfsserver: fix SELinux issue due to newer ls versions giving additional output.
  * - spec: make Samba/CIFS dependency weak for Fedora 32 and RHEL/CentOS 8 and   remove the dependency for later Fedora/RHEL/CentOS versions
  * nfsserver: stop nfsdcld if present during stop-action
  * Enable comparing versions containing git hashes and more
  * azure-events: only decode() when exec() output not of type str
  * pgsql: support RHEL 8.1 pacemaker
  * Filesystem: Convert leading space characters to tabs
  * Filesystem: POSIX-compliant syntax for portability
  * Filesystem: Support whitespace in device or directory name
  * sybaseASE: Run verify_all() for start operation only
  * iSCSILogicalUnit: lio-t: Add pscsi LIO-T backing store
  * spec: fix lsb_release dependency
  * azure-lb: Don't redirect nc listener output to pidfile
  * send_ua/IPv6addr: use sigaction() instead of deprecated siginterrupt()
  * Fix typos in galera RA
  * [gcp-vpc-move-vip] Add support for multiple alias IP ranges on one node
  * [gcp-vpc-move-vip] Improve accuracy of metadata and log messages
  * docker-compose: bugfix (#1523)
  * mdraid: fix bashism
  * build: update ChangeLog for 4.6.1
  * dummypy: make Python 2 compatible
  * dummypy: build fixes to generate the agent from the .in and generate manpage
  * build: update ChangeLog for 4.6.0
  * pgsql: use XML output for better backward and forward compatibility, and "Promoted" keyword to be ready for Pacemaker 2.1
  * build: fix failing to link if link already exists
  * ocf_is_ms(): also check OCF_RESKEY_CRM_meta_promotable to make it work w/Pacemaker 2.x
  * ldirectord: add support for ldaps
  * exportfs: fix ocft script failure
  * exportfs: fix bashism
  * aws-vpc-move-ip: fix bashism
  * aliyun-vpc-move-ip: fix bashism
  * podman: fix bashism
  * docker-compose: fix bashism
  * mdraid: fix bashism
  * crypt: fix bashism
  * Filesystem: set "fast_stop" default to "no" for GFS2 filesystems as they are likely to use more than 6 seconds to stop
  * build: update ChangeLog for 4.6.0-rc1
  * Fix _default variables in clvm RA.
  * exportfs: fix monitor-action in symlink-logic for when directory doesnt exist
  * nfsserver: prevent error messages when /etc/sysconfig/nfs does not exist
  * aliyun-vpc-move-ip: Add error log output (#1504)
  * High: docker-compose: new resource agent (#1499)
  * podman: make sure to remove containers with lingering exec sessions
  * tomcat: only create directory during start action
  * gcp-pd-move: fixes and improvements
  * nfsserver: fix NFSv4-only support
  * Medium: Squid: made squid_opts parameter available.
  * azure-events: handle exceptions in urlopen (#1496)
  * db2: HADR add STANDBY/REMOTE_CATCHUP_PENDING/DISCONNECTED to correctly promote standby node when master node disappears (e.g. via fencing)
  * Increase the rabbitmqctl wait timeout during start()
  * exportfs: add symlink support
  * Dummy RA in Python (#1490)
  * Eliminated logging.basicConfig() That method installed a root logger to be used with logging methods. The root logger is a stream logger which sends output to stderr, so every log data ended up in stderr as well
  * pgsql: support to crm_mon output for Pacemaker-2.0.3.
  * Replace aws command line with OCF_RESKEY_awscli property. (#1483)
  * mdraid: new resource agent
  * crypt: new resource agent (#1477)
  * Disable google api cache discovery
  * Importforce should not be a unique parameter.
  * Mid: postfix: Fixed ocf_exit_reason calling mistake.
  * Mid: dovecot: Fixed ocf_exit_reason calling mistake.
  * aws-vpc-move-ip: delete remaining route entries
  * Increase the security of monitor user in oracle
  * aws-vpc-route53: add support for public and secondary private IPs
  * aws-vpc-route53: cleanup and improvements
  * galera: Fix value used for connecting with the empty password.
  * ocf-shellfuncs: ocf_is_clone: update comment based on clone-max fix in previous commit
  * Fix audit issue with secure tmp file (#1468)
  * ocf-shellfuncs: fix ocf_is_clone() (clone_max can be 0 with cloned resources)
  * Make secure tmp files (#1467)
  * redis: run validate-action during start
  * Filesystem: Add lustre as networked filesystem
  * build: update ChangeLog for 4.5.0
  * aws-vpc-move-ip: add routing_table_role parameter to metadata
  * iSCSILogicalUnit: fix default value for OCF_RESKEY_liot_bstype
  * build: update ChangeLog for 4.5.0-rc1
  * lvmlockd: remove locking_type parameter from lvm.conf for LVM &gt; v2.03
  * Allow user to specify role with which to query/update route table
  * Add support for LIO-T incoming CHAP auth for TPG
- Remove patches applied in the update:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
  enable-git-hashes-in-versions.patch
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
</package>
<package pkgid="210938b027cfe80efb3842052c4cfaf372003122f0ede5d0deaf2edf40f0f4b3" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.8.0+git30.d0077df0" rel="8.5.1"/>
  <changelog author="kgronlund@suse.com" date="1540209600">- Included the missing azure-events RA needed for maintenance on the
  Azure Public Cloud. (bsc#1112334)
- Included the ocy.py library used by the azure-events RA (bsc#1112334)
- Update to version 4.1.1+git24.9b664917:
  * apache: fix return value for silent_status
  * ZFS: cleanup different indentations
  * Fix spelling error in gcp-vpc-move-ip/route
  * Initial version of the azure-events RA
  * rabbitmq-cluster: fail monitor when node is in minority partition
  * ZFS agent: check status without locks when possible
  * Mid: pgsql: Fix to ignore Master's re-promote.
  * Low: oracle: print more appropriate log when dbopen was failed
  * Low: oracle: accept any boolean value for clear_backupmode option
  * nfsserver: run prepare_directory after bind_tree and stop var-lib-nfs-rpc_pipefs.mount to fix issues when changing shared_infodir
  * CTDB: fix --logging/--logfile version string comparison (bsc#1102935)
  * Do not use the absolute path in redis' pidof calls
  * awseip: Documentation updates to prerequisites
  * nfsserver: only mount rpc_pipefs if it's not mounted
  * nfsserver: mount based on rpcpipefs_dir variable
  * LVM-activate: fixes
  * IPv6Addr/nagios/sybaseASE: add missing "s"-suffix in metadata
  * Add gcp-pd-move python script
  * Medium: Squid: Use ss if netstat is not available
  * Medium: portblock: Use ss or netstat (partial)
  * Medium: garbd: Use netstat or ss
  * Mid: apache: Retry pid check.
  * timeout/interval: add "s" suffix where it's missing
  * Low: Xen: Set utilization for cpu and hv_memory
  * pgsql: create replication slots after promoting master
  * VirtualDomain: add stateless support
- Add 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1541073600">- Update to version 4.2.0+git8.7c750bab:
  * heartbeat/{docker,podman,rkt}: nicer treatment of "reuse" parameter
  * Maint: fix several typos discovered with "make spellcheck"
  * Fix demote example log line.</changelog>
  <changelog author="kgronlund@suse.com" date="1544097600">- Update to version 4.2.0+git33.69a622fd:
  * rabbitmq-cluster: better ensure node attributes are removed
  * Do not log at debug log level when HA_debug is unset
  * Enable --query flag in DescribeRouteTable API  (#1269)
  * Moved more Code to the Legacy section and cleaned the Legacy code as we already know that we are on pre-1.0 Version
  * Add lxc-stop Timeout
  * Remove Parameter and replace with Version Check
  * lxc: Add Support for lxc-stop
  * rabbitmq-cluster: fix regression in rmq_stop
  * rabbitmq-cluster: debug log detailed output when mnesia query fails
  * SAPDatabase: Improved the documentation about HANA usage
- Remove 0001-Revert-Add-additional-info-to-SAPDatabase-RA.patch</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.0+git63.0f7987fb:
  * clvm: support exclusive mode
  * Revert " Added support for multiple slaves to pgsql."
  * azure-lb: remove reference to status from usage
  * configure: add Python library detection
  * Added support for multiple slaves to pgsql.
  * LVM-activate: make vgname not uniqe
  * LVM-activate: fix dmsetup check
  * LVM-activate: fix bashism [[
  * Route: make family parameter optional
  * LVM-activate: dont fail initial probe
  * docker: Fix issues with stop operation
  * rabbitmq-cluster: always use quiet flag for eval calls
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - included comment in metadata section (bsc#1125138)
  * aws-vpc-move-ip: multiple VPC routing tables in routing_tables parameter - adjusting sleep time (bsc#1125138)
  * aws-vpc-move-ip: new feature: include support for multiple routing tables (bsc#1125138)</changelog>
  <changelog author="ghe@suse.com" date="1554206400">- LVM-activate returns the correct value on initial probe (bsc#1114855)
  * 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch</changelog>
  <changelog author="dakechi@suse.com" date="1556884800">- Update to version 4.2.0+git104.25f2052b:
  * Low: LVM: Change of return code when start fails.
  * galera: Ignore safe_to_bootstrap in grastate.dat in some cases
  * aws-vpc-move-ip: Linting adjustment (bsc#1133962)
  * aws-vpc-move-ip: Moving shared part outside if (bsc#1133962)
  * aws-vpc-move-ip: More robust approach of getting MAC address (bsc#1133962)
  * ethmonitor: fix is_interface() regression
  * aws-vpc-move-ip: Requested fix to avoid using AWS API (bsc#1133962)
  * aws-vpc-move-ip: Fixing indentation (bsc#1133962)
  * aws-vpc-move-ip: Fix for VM having multiple network interfaces (bsc#1133962)
  * add network namespace support to IPaddr2
  * [rabbitmq] Stop redirecting all output to /dev/null in set_policy
  * Support build and install on RHEL 6 (#1308)
  * gcp-vpc-move-route/gcp-vpc-move-vip: fix Python 3 encoding issue
  * IPsrcaddr: make proto optional to fix regression when used without NetworkManager
  * LVM-activate: align dmsetup report command to standard
  * LVM-activate: return OCF_NOT_RUNNING on initial probe (bsc#1114855)
  * ethmonitor: check if interface exists by link
  * Squid: fix pid file issue due to new Squid version saving the PID of the parent process instead of the listener child process
  * Restrict strncpy by size of target, not of source. Fixes gcc error/warning
  * CTDB: add ctdb_max_open_files parameter
  * LVM-activate: only check locking_type when LVM &lt; v2.03
  * redis: Filter warning from stderr when calling 'redis-cli -a'
  * LVM-activate: fix indentation
- Remove 0007-LVM-activate-return-OCF_NOT_RUNNING-on-initial-probe.patch
  * This patch was integrated upstream and is not needed as an extra patch.</changelog>
  <changelog author="tbechtold@suse.com" date="1558526400">- Update to version 4.2.0+git116.b6c0f9fb:
  * galera: Log message when changing content of grastate.dat file
  * Use _default variables for all OCF_RESKEYs.
  * Use _default variable for binary path.
  * Drop unused LSB_STATUS_STOPPED variable.
  * Add resource agent for dovecot.
  * Fixes parameter meta-data
  * Fails docker RA gracefully when command not found Fails gracefully when daemon not running
  * CTDB: fix version string with vendor trailer comparison (bsc#1133337)</changelog>
  <changelog author="dakechi@suse.com" date="1559649600">- Update to version 4.2.0+git122.571ed619:
  * Fix implicit bytes conversion that breaks py3. Reduces the amount of errors messages using default value on crm_attribute (bsc#1137038, bsc#1137231)
  * galera: Allow empty password for "check_passwd" parameter
  * Squid: dont run pgrep -P without PID</changelog>
  <changelog author="dakechi@suse.com" date="1560513600">- Update to version 4.2.0+git157.40de8382:
  * azure-events: change message log level for the non action messages (bsc#1137038, bsc#1137231)
  * Remove unneeded podman exec --help call
  * Simplify podman_monitor()
  * Avoid double call to podman inspect in podman_simple_status()
  * dhcpd: keep SELinux context
  * vsftpd: fix missing $ on exit code detected by CI
  * ocf_is_true: add True to regexp
  * Low: Filesystem: Fix missing mount point due to corrupted mount list
  * Low: Filesystem: Fix a problem umount is not executed in the event of a disk failure
  * pgsql: enhance checks in pgsql_real_start to prevent incorrect status gets
  * Set fdisk command options on Linux or BSD
  * Adds a virtio- prefix to check disk's availability
  * Use fdisk to physically check disks' availability
  * Monitor: check cinder volume locally without using the API
  * Bad variable name to export (sh syntax)
  * Use strict sh features (no bash regex)
  * Cinder: Manages a local cache and calls the API to get openstack_id
  * Medium: pgsql: Set initial score for primary and hot standby in the probe.
  * Volume re-attaching, v3 API, get hostname from corosync</changelog>
  <changelog author="ddiss@suse.com" date="1560513601">- Fix CTDB resource agent for Samba 4.9.0 and later (bsc#1137130)
  * 0007-CTDB-support-Samba-4.9.patch</changelog>
  <changelog author="dakechi@suse.com" date="1565784000">- Update to version 4.3.0+git131.7af8c368:
  * mysql/mariadb/galera: use runuser/su to avoid using SELinux DAC_OVERRIDE
  * Generate addition drop-in dependencies for podman containers
  * Delay: protect grep regex argument from shell globbing
  * ipsec: fix bashism; [ a == b ] -&gt; [ a = b ]
  * changing bashism to generic solution
  * iSCSILogicalUnit: only create acls if it doesnt exist
  * LVM-activate: fix monitor might hang due to lvm_validate which was added by accident
  * check if mod_status is present in configuration
  * Load apache status modules from RA cmdline for SUSE only OS (bsc#1138281)
  * Improve PidFile pattern
  * CTDB: drop sysconfig presence check during validate
  * CTDB: generate script.options file for 4.9+
  * podman: only use exec to manage container's lifecycle
  * Fix path to example for ocf python agent
  * CTDB: support Samba 4.9+ (bsc#1137130)
  * Medium: Filesystem: Prevents to all root user processes are killed when bind mounting a directory on rootfs.
  * aws-vpc-route53: Removed absolute path for awk command (bsc#1140874)
  * aws-vpc-route53: Tuning on dig timeout on r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Change check interval in _update record function (bsc#1140874)
  * aws-vpc-route53: Remove unecessary tabs (bsc#1140874)
  * aws-vpc-route53: Normalize variable declaration (bsc#1140874)
  * aws-vpc-route53: Changed log line wording on r53_stop function (bsc#1140874)
  * aws-vpc-route53: Add --cli-connect-timeout 10 option to AWS CLI (bsc#1140874)
  * aws-vpc-route53: Add extra log line to r53_start function (bsc#1140874)
  * aws-vpc-route53: Replace ec2metada with curl to fetch the IP address directly from EC2 metadata (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_start function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_stop function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to _update_record function (bsc#1140874)
  * aws-vpc-route53: Changes and improvements to r53_monitor function (bsc#1140874)
  * aws-vpc-route53: Add binary check for curl and dig (bsc#1140874)
  * aws-vpc-route53: Change in function names from ec2ip_* to r53_* (bsc#1140874)
  * aws-vpc-route53.in: Add missing quotes in ec2ip_stop() (bsc#1140874)
  * Filesystem: remove removed notify-action from metadata
  * Use _default variables in ZFS RA.
  * Use _default variables in Xinetd RA.
  * Use _default variables in Xen RA.
  * Use _default variables in WinPopup RA.
  * Use _default variables in vsftpd RA.
  * Use _default variables in VirtualDomain RA.
  * Use _default variables in VIPArip RA.
  * Use _default variables in varnish RA.
  * Use _default variables in tomcat RA.
  * Use _default variables in syslog-ng RA.
  * Use _default variables in SysInfo RA.
  * Use _default variables in Stateful RA.
  * Use _default variables in Squid RA.
  * Use _default variables in SphinxSearchDaemon RA.
  * Use _default variables in slapd RA.
  * Use _default variables in sg_persist RA.
  * Use _default variables in sfex RA.
  * Use _default variables in ServeRAID RA.
  * Use _default variables in SendArp RA.
  * Use _default variables in scsi2reservation RA.
  * Use _default variables in SAPInstance RA.
  * Use _default variables in SAPDatabase RA.
  * Use _default variables in rsyslog RA.
  * Use _default variables in rsyncd RA.
  * Use _default variables in Route RA.
  * Use _default variables in redis RA.
  * Use _default variables in Raid1 RA.
  * Use _default variables in rabbitmq-cluster RA.
  * Use _default variables in Pure-FTPd RA.
  * Use _default variables in proftpd RA.
  * Use _default variables in pound RA.
  * Use _default variables in postfix RA.
  * Use _default variables in portblock RA.
  * Use _default variables in podman RA.
  * Use _default variables in pingd RA.
  * Use _default variables in pgsql RA.
  * Use _default variables in ovsmonitor RA.
  * Use _default variables in oralsnr RA.
  * Use _default variables in oracle RA.
  * Use _default variables in oraasm RA.
  * Use _default variables in openstack-info RA.
  * Use _default variables in NodeUtilization RA.
  * Use _default variables in nginx RA.
  * Use _default variables in nfsnotify RA.
  * Use _default variables in mysql-proxy RA.
  * Use _default variables in ManageVE RA.
  * Use _default variables in ManageRAID RA.
  * Use _default variables in MailTo RA.
  * Use _default variables in machine-info RA.
  * Use _default variables in lxd-info RA.
  * Use _default variables in lxc RA.
  * Use _default variables in lvmlockd RA.
  * Use _default variables in LVM-activate RA.
  * Use _default variables in LVM RA.
  * Use _default variables in LinuxSCSI RA.
  * Use _default variables in jira RA.
  * Use _default variables in jboss RA.
  * Use _default variables in iSCSITarget RA.
  * Use _default variables in iSCSILogicalUnit RA.
  * Use _default variables in IPsrcaddr RA.
  * Use _default variables in ipsec RA.
  * Use _default variables in IPaddr2 RA.
  * Use _default variables in IPaddr RA.
  * Use _default variables in iface-vlan RA.
  * Use _default variables in ids RA.
  * Use _default variables in ICP RA.
  * Use _default variables in garbd RA.
  * Use _default variables in galera RA.
  * Use _default variables in fio RA.
  * Use _default variables in Filesystem RA.
  * Use _default variables in EvmsSCC RA.
  * Use _default variables in Evmsd RA.
  * Use _default variables in ethmonitor RA.
  * Use _default variables in eDir88 RA.
  * Use _default variables in Dummy RA.
  * Use _default variables in docker RA.
  * Use _default variables in dnsupdate RA.
  * Use _default variables in Delay RA.
  * Use _default variables in db2 RA.
  * Use _default variables in CTDB RA.
  * Use _default variables in clvm RA.
  * Use _default variables in ClusterMon RA.
  * Use _default variables in aws-vpc-move-ip RA.
  * Use _default variables in apache RA.
  * Use _default variables in aliyun-vpc-move-ip RA.
- Remove 0007-CTDB-support-Samba-4.9.patch
  * This patch was merged upstream.</changelog>
  <changelog author="varkoly@suse.com" date="1568030400">- Update to version 4.3.0+git161.00cb192d:
  * apache: correctly detect mod_status.so when statusurl is set
    (bsc#1138281)
  * Restore users/perms/policies even if starting in a single node mode
  * spec: use %{?centos} as _version doesnt work on newer CentOS versions
  * exportfs: doc clarification for clientspec format
  * Fixup docker_stop condition on error
  * Make the check for the docker daemon being up more robust
  * Low: oracle-common: Delete the ORACLE_HOME check that is no longer needed because it is checked first.
  * Low: ora-common: Properly output message when sid parameter is invalid.
  * spec: updates from Fedora
  * spec: update to BR to libnet-devel for opensuse
  * CI: "make rpm" fixes
  * Route: dont fence node when parameters arent set
  * requested changes applied.
  * Added support for SSL replication
  * [build] drop now unnecessary make distcheck options
  * [build] allow systemd files to be installed in non-standard location
  * [build] fix make distcheck by adding fallback OS dir to find docbook.xsl
  * Don't call readlink on path if it does not exist</changelog>
  <changelog author="dakechi@suse.com" date="1569844800">- Update to version 4.3.0+git178.b102c209:
  * Adapt azure-lb Resource Agent to support socat usage too (bsc#1150046)
  * redis: consider redis-cli features to choose optimal password passing method and warning filtering workaround (#1403)
  * fix master_is_active() erroneously reporting there is master when there is no fixes #1399
  * nfsserver: use "--no-legend" for systemctl "list-unit-files" calls
  * nfsserver: performance improvements for systemd enabled systems
  * IPaddr2: IPv6 return empty string when sanitation fails
  * Low: IPaddr2: fix to work properly with unsanitized IPv6 addresses
  * Filesystem: improve "/" check for bind mounts
  * IPsrcaddr: add destination and table parameters</changelog>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1621944000">- Update to version 4.8.0+git30.d0077df0:
  (bsc#1178680) HA-LVM systemid race condition introduces an error "active on 2 nodes"
  (bsc#1183971) L3: azure-events puts both nodes in standby
  (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
  (bsc#1180590) azure-events URLError fixed upstream
  (bsc#1184607) gcp-vpc-move-route resource agent file_cache is unavailable when using oauth2client
  (bsc#1179977) L3: anything RA stop operation fails if /root/.profile has unexpected content
  * Low: dummy: Add missing action to dummy_usage function
  * LVM-activate: Disable VG autoactivation in system_id access_mode
  * gcp-vpc-move-vip.in: Adds retries
  * gcp-ilb: resource wrapping nc or socat to respond to health checks (#1541)
  * azure-events: update api_version
  * openstack-cinder-volume: CLI output parsing fixes, fetch of node ID consistency, monitor action simplification, and proper use of osvol_validate.
  * openstack-virtual-ip: New resource agent for virtual IP support in OpenStack.
  * openstack-floating-ip: Proper use of osflip_validate and small log message fixes.
  * configure: add /usr/local/share to fallback path to be scanned for docbook path
  * openstack-info: Use OSInfo_validate in start action. (#1639)
  * openstack-info: python variable substitution and test for json
  * VirtualDomain: ensure needed virtual storage pools and networks are up and refreshed
  * db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
  * - Updates due to API output format changes. - Attempt to future-proof parsing of the output.
  * update aws-vpc-route53
  * build: add smb-share and fix &amp; not passing XML check/manpage generation
  * smb-share: new RA to manage Samba shares on the fly. (#1628)
  * build: update ChangeLog for 4.8.0
  * podman: return OCF_NOT_RUNNING when monitor cmd fails (not running)
  * bundle: run crm_mon without performing validation
  * awsvip: dont partially match similar IPs during monitor-action
  * AWS agents: dont spam log files when getting token
  * build: update ChangeLog for 4.8.0-rc1
  * build: update ChangeLog for 4.7.0
  * ci/build.sh: skip Python agents and *.in
  * CI: run shellcheck tests during "make check" to move from Travis CI
  * Filesystem: fix force_unmount default to safe for RHEL9+ issue introduced in b792a143fc90468f8911243a5ea77c0c424bd624
  * azure-lb: Redirect stdout and stderr to /dev/null
  * azure-lb: Be quiet during stop operation
  * configure: dont use OCF_ROOT_DIR from glue.h
  * docker-compose: Bugfix handle ymls correctly
  * Filesystem: change force_unmount default to safe for RHEL9+
  * gcp-vpc-move-route: make "vpc_network" optional
  * VirtualDomain: fix pid_status() on EL8 (#1614)
  * spec: add BuildRequires for google lib
  * nfsserver: Error-check unbind_tree
  * gcp-vpc-move-vip: correctly return error when no instances are returned
  * gcp-vpc-move-route: fix stop-action when route stopped, and fix check_conflicting_routes()
  * The anything RA getpid() function can fail to return the pid in the OCF_RESKEY_pidfile if the root user has commands in .profile which prints numeric characters. To demonstrate, /root/.profile contains: echo -e '911 WARNING: YOU ARE SUPERUSER!' Write only the pid into the pidfile.
  * added real servers threshold settings to ldirectord
  * gcp-vpc-move-route, gcp-vpc-move-vip: Parameterize project ID
  * nfsclient: fix stop-action when export not present
  * heartbeat/Route: Return OCF_NOT_RUNNING status if iface doesn't exist.
  * pgsql: make wal receiver check compatible with PostgreSQL &gt;= 11
  * Low: mysql-common: check datadir permissions
  * ocf-shellfuncs: make ocf_is_bash4() detect Bash v4 or greater (which it was supposed to according to the comments)
  * Dev: ocft: fix OCF_RESKEY_CRM_meta_timeout
  * build: update ChangeLog for 4.7.0-rc1
  * crypt: avoid failing for LVM exclusive by not running full sanity check during probes
  * LVM-activate: Fix return value in lvm_status()
  * LVM-activate: Remove local variables (bashisms)
  * LVM-activate: Stop before blk-availability.service
  * ocf-distro: Use Solaris-compatible grep
  * ocf-distro: Update version format
  * ocf-distro: Improve robustness and specificity (#1558)
  * [build] export ocfrootdir consistently
  * crypt: allow encrypted_dev to be symlink to support using devices in /dev/disk/... or UUID
  * heartbeat/iface-vlan: vlan_{interface,id} do not have to be unique.
  * [build] fix systemd paths when using non standard prefix
  * crypt: make key_file and crypt_type parameters not unique
  * Asterisk dir fix (#1583)
  * fix problem with unset OCF_RESKEY_CRM_meta_interval by cluster framework
  * AWS agents: add support for IMDSv2
  * Add pkg-config file
  * configure: add PKG_CHECK_VAR.m4 to avoid failing on older distros
  * configure: use pkg-config to detect systemd-paths to make CI able to define them the same way for all CL-projects
  * isRunning_cmd fix due to improper pkill parameters
  * configure: default to build heartbeat agents only
  * podman: recover from podman's storage being out of sync
  * podman: recover from killed conmon side process
  * aws-vpc-move-ip: Don't warn for expected scenarios
  * sybaseASE: add logfile parameter
  * galera: recover after network split in a 2-node cluster
  * man: use OCF_CHECK_LEVEL for depth parameters in pcs examples
  * crypt: fix missing &amp;&amp; to set exit_reason
  * galera: set bootstrap attribute before promote
  * galera: fix check user configuration with clustercheck
  * ethmonitor: is_interface: RE matches vlan names
  * man: use promotable keyword in manpage examples
  * SAPInstance - introduce MINIMAL_PROBE resource parameter (#1564)
  * send_arp (libnet): use sigaction() instead of deprecated siginterrupt()
  * fixes and improvements
  * galera: recover from joining a non existing cluster
  * Filesystem: Default fast_stop to no for RHEL 9+ and for other distros
  * Fix ocf.py usage for py2 when self param is involved
  * galera: Fix automatic recovery when a cluster was not gracefully stopped
  * aws-vpc-move-ip: Fix the region option
  * aws-vpc-move-ip: Implemented optional eni lookup instead of the default instance id.
  * aws-vpc-move-ip: Add --region attribute
  * build: fix distcheck issue introduced by including READMEs in heartbeat directory
  * build: include all READMEs in heartbeat directory
  * spec: Recommends not supported for RHEL/CentOS 7 or older
  * - spec: ldirectord: added perl-IO-Socket-INET6 dependency on Fedora - spec: fix last remnants of 0%{?centos_version}
  * gcp-vpc-move-vip: Fix sort for list of dicts in python3
  * filesystem: mmap search not specific enough
  * galera/redis: support RHEL 8.1 pacemaker
  * galera/redis: use --output-as for crm_mon w/newer Pacemaker, and prepare for Promoted role
  * azure-events: report error if jsondata not received
  * azure-events: import URLError and encode postData when necessary
  * nfsnotify: fix SELinux issue due to newer ls versions giving additional output.
  * nfsserver: fix SELinux issue due to newer ls versions giving additional output.
  * - spec: make Samba/CIFS dependency weak for Fedora 32 and RHEL/CentOS 8 and   remove the dependency for later Fedora/RHEL/CentOS versions
  * nfsserver: stop nfsdcld if present during stop-action
  * Enable comparing versions containing git hashes and more
  * azure-events: only decode() when exec() output not of type str
  * pgsql: support RHEL 8.1 pacemaker
  * Filesystem: Convert leading space characters to tabs
  * Filesystem: POSIX-compliant syntax for portability
  * Filesystem: Support whitespace in device or directory name
  * sybaseASE: Run verify_all() for start operation only
  * iSCSILogicalUnit: lio-t: Add pscsi LIO-T backing store
  * spec: fix lsb_release dependency
  * azure-lb: Don't redirect nc listener output to pidfile
  * send_ua/IPv6addr: use sigaction() instead of deprecated siginterrupt()
  * Fix typos in galera RA
  * [gcp-vpc-move-vip] Add support for multiple alias IP ranges on one node
  * [gcp-vpc-move-vip] Improve accuracy of metadata and log messages
  * docker-compose: bugfix (#1523)
  * mdraid: fix bashism
  * build: update ChangeLog for 4.6.1
  * dummypy: make Python 2 compatible
  * dummypy: build fixes to generate the agent from the .in and generate manpage
  * build: update ChangeLog for 4.6.0
  * pgsql: use XML output for better backward and forward compatibility, and "Promoted" keyword to be ready for Pacemaker 2.1
  * build: fix failing to link if link already exists
  * ocf_is_ms(): also check OCF_RESKEY_CRM_meta_promotable to make it work w/Pacemaker 2.x
  * ldirectord: add support for ldaps
  * exportfs: fix ocft script failure
  * exportfs: fix bashism
  * aws-vpc-move-ip: fix bashism
  * aliyun-vpc-move-ip: fix bashism
  * podman: fix bashism
  * docker-compose: fix bashism
  * mdraid: fix bashism
  * crypt: fix bashism
  * Filesystem: set "fast_stop" default to "no" for GFS2 filesystems as they are likely to use more than 6 seconds to stop
  * build: update ChangeLog for 4.6.0-rc1
  * Fix _default variables in clvm RA.
  * exportfs: fix monitor-action in symlink-logic for when directory doesnt exist
  * nfsserver: prevent error messages when /etc/sysconfig/nfs does not exist
  * aliyun-vpc-move-ip: Add error log output (#1504)
  * High: docker-compose: new resource agent (#1499)
  * podman: make sure to remove containers with lingering exec sessions
  * tomcat: only create directory during start action
  * gcp-pd-move: fixes and improvements
  * nfsserver: fix NFSv4-only support
  * Medium: Squid: made squid_opts parameter available.
  * azure-events: handle exceptions in urlopen (#1496)
  * db2: HADR add STANDBY/REMOTE_CATCHUP_PENDING/DISCONNECTED to correctly promote standby node when master node disappears (e.g. via fencing)
  * Increase the rabbitmqctl wait timeout during start()
  * exportfs: add symlink support
  * Dummy RA in Python (#1490)
  * Eliminated logging.basicConfig() That method installed a root logger to be used with logging methods. The root logger is a stream logger which sends output to stderr, so every log data ended up in stderr as well
  * pgsql: support to crm_mon output for Pacemaker-2.0.3.
  * Replace aws command line with OCF_RESKEY_awscli property. (#1483)
  * mdraid: new resource agent
  * crypt: new resource agent (#1477)
  * Disable google api cache discovery
  * Importforce should not be a unique parameter.
  * Mid: postfix: Fixed ocf_exit_reason calling mistake.
  * Mid: dovecot: Fixed ocf_exit_reason calling mistake.
  * aws-vpc-move-ip: delete remaining route entries
  * Increase the security of monitor user in oracle
  * aws-vpc-route53: add support for public and secondary private IPs
  * aws-vpc-route53: cleanup and improvements
  * galera: Fix value used for connecting with the empty password.
  * ocf-shellfuncs: ocf_is_clone: update comment based on clone-max fix in previous commit
  * Fix audit issue with secure tmp file (#1468)
  * ocf-shellfuncs: fix ocf_is_clone() (clone_max can be 0 with cloned resources)
  * Make secure tmp files (#1467)
  * redis: run validate-action during start
  * Filesystem: Add lustre as networked filesystem
  * build: update ChangeLog for 4.5.0
  * aws-vpc-move-ip: add routing_table_role parameter to metadata
  * iSCSILogicalUnit: fix default value for OCF_RESKEY_liot_bstype
  * build: update ChangeLog for 4.5.0-rc1
  * lvmlockd: remove locking_type parameter from lvm.conf for LVM &gt; v2.03
  * Allow user to specify role with which to query/update route table
  * Add support for LIO-T incoming CHAP auth for TPG
- Remove patches applied in the update:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
  enable-git-hashes-in-versions.patch
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
</package>
<package pkgid="29eff5c7260da338b82c3c091fd6f4abecd1293ac0a7f822ad9bce471519857e" name="libIlmImf-2_2-23" arch="aarch64">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="028f543b9b92d68d1b14a92077fb61cdbc0349f874be8ee26a0ce47062030f1f" name="libIlmImf-2_2-23" arch="ppc64le">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="2383cd0eaab4748f782458f9b3b4577f08202473f5a3f24663c71d121c8f6621" name="libIlmImf-2_2-23" arch="s390x">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="06f49351e7277c7f907c978780008dd9cd01e27e76995c702115e45c825ecd0e" name="libIlmImf-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="1b3986c3f677dc2e3cae9df36096db223128bcb477b7ac455b8892626bf48b2d" name="libIlmImf-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="cb77548e11b2b00b4bb9714e44f770bbf84a54be6bfa8c04ddbf6214da391ab2" name="libIlmImfUtil-2_2-23" arch="aarch64">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="d48beb50bff0b67f98ac0bcceb259285bc36c590b1ceb525853e6e312a259a89" name="libIlmImfUtil-2_2-23" arch="ppc64le">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="4e7aaa996b5fdfe01bc6f6cd6b1b9c1dc7321c89ece7dcbcba02fc1929fdbfcf" name="libIlmImfUtil-2_2-23" arch="s390x">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="e97dd52a9648f769f8bc729da96f78dfe157aedee354369f0a2112c8d97ed948" name="libIlmImfUtil-2_2-23" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="4a4d5e5c1ce27e2a102fb005eee300d17c4ea503e6201ef76a37f3c8048e6752" name="libIlmImfUtil-2_2-23-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="3.32.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="pgajdos@suse.com" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623758400">- security update
- added patches
  fix CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
  + openexr-CVE-2021-3598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623844800">- security update
- added patches
  fix CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
  + openexr-CVE-2021-3605.patch</changelog>
</package>
<package pkgid="32bab67a7fd0571389103760029309a64f0011ec7e5eae093892c10d34b701c8" name="libKF5GlobalAccel5-32bit" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="dc9fc66c6915afbc5e6ecbcd2c19d2bbcd193e55a446cebd7634742d2c35607d" name="libKF5GlobalAccel5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="01c34a34f2ba9f61acef031523c2b852b2f86d70df6f6adbe954ed98004ec8ee" name="libKF5GlobalAccel5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="fa35242d330005da9b41afa3897d024051ac5632e5fa44dfc178bcbaf6c5c2b5" name="libKF5GlobalAccel5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="41980ff3c4b803c635d4899182e131de56f1014c2d21d904c5a5955931a53001" name="libKF5GlobalAccel5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="42597cf9a70ebeda5d448357aaea45bc9c1f3fcd992178df1f40f0a225bab1f1" name="libKF5GlobalAccel5-lang" arch="noarch">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="2ec433de2e9c08872379afe05c06a6f0ebcfb3ebfebfaeb4769757041d10d465" name="libKF5GlobalAccelPrivate5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="4734d79e6a50d0994091be6892c8fbd056c170069502304f9debd718df333129" name="libKF5GlobalAccelPrivate5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="0e7a73ae305460ac83e9a4cfc0cbf0b481829a1ecd96ce64aeaa85dc1dde88b5" name="libKF5GlobalAccelPrivate5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="66b99acc9cabdc446a231f7639bac4834364505d8952ede56addaff42e2f6062" name="libKF5GlobalAccelPrivate5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="wbauer@tmo.at" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="christophe@krop.fr" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="christophe@krop.fr" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="christophe@krop.fr" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="christophe@krop.fr" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="christophe@krop.fr" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="christophe@krop.fr" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="christophe@krop.fr" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="christophe@krop.fr" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="6b58c67ddaf8fcc439a0286b96fc70656ad73d4d48271d0f1ef775dedc3c97a0" name="libMrm4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="d7f5c9384d7ba2e33fa80903bb7ee5f74f12f6c1fd34de83844b695d79669150" name="libMrm4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9afc15b2a87ca955089e2ede4dedec8b74ad75598e06f9583e1cbb261e96de2c" name="libMrm4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="a64b4e6864e8aceb907598ff7351ee77bb19f277266505dd259cfc58f30d2436" name="libMrm4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="1de844db9ce7cfdb046f58889ece61c4c85746a57c6f37c6311ad350b03b6805" name="libMrm4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="0d6e51fd6b4a73f78d4e12776cd8a482878e2028efea7a9a1ebce071eca7d680" name="libUil4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="687dab475b5c4f9dec992b0b21c3cc645ee200e38e6aba5e891b3efdb8352044" name="libUil4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="a03de6903f8a2da3c654284a398cc10e4b5d8db3538fa1d1295a66a3b72c6502" name="libUil4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="d5fab196fc1c719f5ef5c73a4bcc67815b9cbde8fc66461d88675786df233e03" name="libUil4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="241ccedebd842127732c6808b2ddff33b5a7f756c21b1bc9477f4df24d678153" name="libUil4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="26df479e0d101d97cf5063a30cf3681a359959872d5aabdb9bdde4020cffad34" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369396800">- Update to version 1.5.99.902 (1.6 RC2):
  This release is brought to you by the letters C, V, &amp; E, and more numbers
  than I can count, with a special guest appearance by the letters J? and j?.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="2246f96d6e262eb428b72cc3a9be3d6f640a1893cdb05f4c04d14f6dcb5845e8" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="dff908526ce00b0092fa82b9cb9b3e18fb856c55aea36360073a82eb56048d9c" name="libX11-6" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="e61b2723a349d5229dc7ba3e76785693a8b80312e32a17c66a889e5e43c4d64c" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="9991eb84bbce57be430fcc8d50670a43d31e00a109fcd1cbd84dc48c9e9f7c00" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="fd181091ae0fcc1f7a9b942857ddf33d379dc6862edca24b0e7dded2f878f87c" name="libX11-6-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="732502c5d9d86b7c972aa3b91a50291a665d2523fbf5be3bacba4f73de66509c" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="ee2fe8352c8b8c56c758c47ce128492c666794db7ed5989eef1df0543e046021" name="libX11-devel" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="462c231e50e0c6dc6eff4c3d1632615bd8f7c60c1f09c88ac1a153c21bca18cd" name="libX11-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="b38fd5c013c3f43e4597e803bc2963d5d414b160b3cee6a51b789b5ff3a59243" name="libX11-devel" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="b02cc74240a913ade839652f23114dd23ec5f9fef7bb7c87bc08e6be5b981605" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="af57402a7fa84d0482b6973e4d6a259e1d8d824cc83f8f5b79bd851cc84197c3" name="libX11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="4afda3e5db6dcade88c4dcd0ace353cf4bbd7223925bf6c325d306bb5fbd4aec" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="25b3afcd6d3b8ab3bfd6ecb530c010cb61de36cfddf20cf57b2a509f16a04298" name="libX11-xcb1" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="7739fa35cf2cb4873a40565227c129b7e71670c25c92cfe0181e127b9a58b9c9" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="becafe1aed4c0ca5f6501b694eb34fa28999612814ae759b861af0fc75c6a790" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="a7c4a8fed7b8bd2aaa9b23c627df4fd1c24cbfe50f3c041d90dfc3c58813c02b" name="libX11-xcb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "?"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "?"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "?"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "?"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="308d8e6f5c8f32cd58b988b56c1f72cf33b0a5240c813c85fec40a8461521d6e" name="libXm4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="bf2b5cfe5511087a4d2c7d31e15882174ca38f547f3c4c0713b24641a9a238fc" name="libXm4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="d9b237de963506b8466eafacb42d6f4edc61894a635dfa0ba1e1e3ab41937a57" name="libXm4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9781239f040acaa587d358d8162938653ae2dc9858f106ec68104580eeda51f8" name="libXm4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="f403289ccf988dd9deb9b257b5558b44ec8e3025e38dd02f0044ccdbd13afcbd" name="libXm4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="0eb243a0ad4933333641f7b05b87b795f3f29b33f0d6cf7a9d3cec8be6fd54df" name="libada10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fc2ba6b9005c2c190b14ed5106aeac0d54b3c4499ad82e7ddf501e1709c5500a" name="libada10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9a3a3029359dfc17b668c3bd3811f6aa14fdd5efe4caeb9bf7bb2e6673036466" name="libada10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="384db56457332b068b7661509e79dbef24ca28e1f5cd8261bf7f92496d650707" name="libada10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="756128989edf3e637dc7e9cdc10a15ee030efa82ee8935870441017c58bbfc28" name="libada10-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2d2c8cb05ad56bfa78bcc5dd8224e0f0b6627509b9271351ce3ca8d859ffdad3" name="libada10-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8f292fc51ac2180dd18416ad8ba816bc90ca09ec8ba719ef8039dc50cb13949d" name="libanthy0-32bit" arch="x86_64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="a92328241c43c738073d3e9e07833f6dc007f369e4ed7489872f414570e9a4bd" name="libanthy0" arch="aarch64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="807ae5ac3decbd10d828aa6629dff19757397fe24cd4e5879b801f86ba862ea5" name="libanthy0" arch="ppc64le">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="201f13cfd8984e3fb5cae6b697e7cfd8a80314075f23febd7846e6440e6f8d74" name="libanthy0" arch="s390x">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="83718420a4fb1241ce0efd0f91ccb9376259335bfb9dfc85b2d8ab61ec37268a" name="libanthy0" arch="x86_64">
  <version epoch="0" ver="9100h" rel="8.3.1"/>
  <changelog author="ftake@geeko.jp" date="1442923200">- Stop providing locale(ja)
  + Most of ja locale users do not need this anymore
- Change the upstream URL
- Clean up the spec file</changelog>
  <changelog author="msuchanek@suse.com" date="1518091200">- Drop build-time requirement on X11. It does not seem to be used for anything.</changelog>
  <changelog author="qzhao@suse.com" date="1535716800">- Update anthy.spec: Divide openSUSE build with emacs function and
  SLE doesn't need it.</changelog>
  <changelog author="idonmez@suse.com" date="1535803200">- Cleanup spec file with spec-cleaner
- Don't install INSTALL file
- Use %bcond_with{out}</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Drop --with-pic that is useless in the face of --disable-static.
- Drop pre-openSUSE-12.3 parts from the build recipe.
- Implement the shared library packaging policy.
- Replace description because canna/freewnn seem comparatively
  active in OBS's M17N project.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560427200">- Fix baselibs.conf: the library was split out as libanthy0 with
  the last change.</changelog>
  <changelog author="werner@suse.de" date="1597752000">- Add patch bugzilla-1175274-emacs-27.1.patch
  There is no (process-kill-without-query) anymore, use
  (set-process-query-on-exit-flag) instead (boo#1175274).</changelog>
  <changelog author="qzhao@suse.com" date="1600171200">- Update anthy.spec: Drop the is_opensuse macro to eliminate the
  difference between SLE-15 and openSUSE-Leap (jsc#SLE-11658).</changelog>
  <changelog author="werner@suse.de" date="1601380800">- Do not use Xemacs on SLE products (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601380801">- Do not use Xemacs on SLE products (jsc#SLE-12100)</changelog>
  <changelog author="werner@suse.de" date="1601467200">- Use build condition to enable or disable Xemacs support (jsc#SLE-11658)</changelog>
  <changelog author="werner@suse.de" date="1601467201">- Use build condition to enable or disable Xemacs support (jsc#SLE-12100)</changelog>
</package>
<package pkgid="8713e82dd377b087337686146ee0ab64718ace7e4090f4e900783478a24bd698" name="libasan6" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b2c6c455bdeef046b633ebd07093ab35d85f82ca47e907a31523554a08b7e473" name="libasan6" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c28c6363ddf8b290c5af440c0ae68d3aca3a0bdb7659426e7ee4041a0583b41b" name="libasan6" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="94c83e97c29264857bd157141b0c30ddc5a28bf9fc2eafb9fb09184abe90cd4b" name="libasan6" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d525b32e19ee095a4644a990243195043911cd0e6d5a7e5966813424e39da6f9" name="libasan6-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0067bb202a0665c0d7b3cc6d501c710d569d8d72e396a12dbcc8da8231728736" name="libasan6-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="37e76479c6f36a404f54642e6a482b14b8452ec696569378bb5061abb6cabf75" name="libass" arch="src">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries
- updated description to official description (fix for RPMLINT warning)</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 0.9.12:
  + Switch to permissive (ISC) license
  + Support \fs+ and \fs- syntax for modifying font size
  + Fix word-wrapping
  + Improved charmap fallback matching
  + Handle a few more VSFilter quirks correctly
  + Add a sensible default style
  + Fix compilation against libpng 1.5
- Add xz BuildRequires, as the new tarballs are xz compressed
- Change License tag from GPLv2+ to ISC, as upstream changed to
  this license.
- Do not use source service, as Factory is moving away from it in
  favor of a different implementation to verify authenticity of
  tarballs. Consequently add a valid URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1319889600">- Update to version 0.10.0
  + Bidirectional layout and Arabic shaping via FriBidi (GC #13)
  + Add API for shaper configuration
  + Add support for `Language' Script Info property, this can be
    used for hinting the text language
  + Vertical layout improvements
  * Use `vert' and `vkna' OpenType features for vertical glyph
    variants
  * Position rotated glyphs onto baseline
  + Parse font encoding property for base text direction hinting
  + Refactor cache system
  + Use generic outlines in place of FreeType glyphs
  + Direct outline bitmap rendering
  + Fix whitespace trimming (GC #35)
  + Do not render border if there's no shadow or glyph (GC #29)
  + Adjust spacing after a italic to non-italic style change (GC #37)
  + Fix fade timing
  + Fix x positioning with borders (GC #27)
- Use pkgconfig() BuildRequires
- Parameterize the soname number</changelog>
  <changelog author="reddwarf@opensuse.org" date="1350993600">- Update to version 0.10.1
  * Fix letter spacing
  * Add \rSTYLENAME syntax support (GC #43)
  * Fix border generation and border style reset (GC #56)
  * Fix various issues with bug-for-bug compatibility of
    transformations (\fax, \fay, etc.) to VSFilter (GC #46, GC #42)
  * Fix drawing parsing (GC #47)
  * Various fixes to shaper (GC #54, GC #55, GC#59)
  * Fix change detection
  * Add ass_set_line_position API to set a vertical subtitle offset
  * Fix scaling of drawing baseline offset (\pbo) values
  * Fix skipping of zero-width characters for FriBiDi shaper
  * Use LTR text base direction by default, similar to VSFilter</changelog>
  <changelog author="tchvatal@suse.com" date="1382011200">- Version bup to 0.10.2
  * API additions and some ABI changes, bumped SONAME
  * Expose header field for VSFilter color mangling (GC #87)
  * Add functions for explicit scaling hints (GC #6)
  * Add 'type' field to ASS_Image (GC #31)
  * Workaround Freetype's font size grid-fitting where appropriate
  * Apply blur to both glyph and border when using opaque box
  * Parser bugfixes
  * Parse angles in style as number
  * Fix fallback event formats
  * Make closing ')' optional for some tags
  * Fix crazy VSFilter behaviour for \move (GC #90)
  * Make \r fall back to line style (GC #104)
  * Parse style name like VSFilter
  * Ignore junk in nested \t tags
  * Make \clip tag arguments mandatory
  * Properly handle script and language in the HarfBuzz shaper
  * Allow ASS_Track and ASS_Renderer to have different ASS_Library
  * Fix stroking in some rare cases
  * Correctly handle @font advance (GC #94)
  * Fix ascent/descent for some fonts (GC #106)
  * Fix ass_step_sub to not require sorted events
  * Fix blur scaling
  * Don't mutate input strings (GC #88)
  * Remove/change some error messages
  * Fix various small memory leaks</changelog>
  <changelog author="olaf@aepfle.de" date="1412510400">- add versioned Requires to devel pkg, enca is required by pkgconfig</changelog>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="014d735f7f9b0a694d27f5d998e0b8466476022280747b69908aaf9b8af540a5" name="libass-devel" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="18ca655c9fa5b04479af59edc4b0de6933339fe25f9d0116bc984a6259946484" name="libass-devel" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="3ba2a91aa1ce1292c86ae0d7002e0de4c443b8fef3ea53ba1511fa140233ef99" name="libass-devel" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="55ed420a118c5c6883cbceb87e70eb4ed213bbfd6c9408da3e559a78c8a10ef6" name="libass-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="d961473cc7ef3bdfa3b7049fb6bfa1dac5fc01e62d89f6cbef07431825a1216e" name="libass9" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="8489d86e3642678de3be5690e22f10d1ee0ada5ef6da16c5306a0d8aae521e57" name="libass9" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="5ef37fb250ba36d6824e7caebef24618061f341d4ae0509c03cf41b58e8e2da6" name="libass9" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="b64cc9b61ad30b515c1d256887f5ae452e4b51c908aab7fb0493cecbf20fed11" name="libass9" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="d79c6d4b1f7c89f4acf6d426dd1c4465c965602daca875acf6474a5fa0a42ae9" name="libass9-32bit" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422619200">- Update to version 0.12.1 (bnc#921212)
  * Make ASS drawings with an extremely high number of control points work
    This change increases compatibility with VSFilter.
  * Bugfixes
  - Fix a crash when using newer harfbuzz versions (GH #155)
  - Load embedded memory fonts correctly
  - Large shadow offsets rendered incorrectly (GH #142)
  - Fix incorrect closing of last drawing contour
  - Fix issues with undefined behavior in shifts
  - Lots of of malloc() error checking
- Update home and download source Url to new project home
- Add baselibs.conf in sources list for Factory</changelog>
  <changelog author="mpluskal@suse.com" date="1436875200">- Update to 0.12.3
  * VSFilter blur compatibility changes
  * VSFilter color/alpha parsing compatibility changes
  * Bugfixes
    + Fix some potential memory leaks and crashes
    + Fix large timestamps (larger than about 600 hours)
    + Fix a potential crash with the new rasterizer and complex
    fonts
    + Do not apply user-configured line position to non-dialog
    events
    + Strictly clip non-dialog events to the video rectangle
- Changes for 0.12.2
  * Add extern "C" guards to the public headers for C++
    compatibility
  * Improvements to style override API and implementation
  * Bugfixes
    + Fix some rasterizer bugs of unknown severity
    + Fix a broken memset() of unknown severity
    + Make timestamp parsing more lenient, which makes libass
    accept invalid
    + files accepted by most other ASS parsers
    + Increase compatibility with broken ASS drawings accepted by
    VSFilter</changelog>
  <changelog author="mpluskal@suse.com" date="1448193600">- Update to 0.13.0
  * Add native font selection backends for OSX (CoreText) and
  Windows (DirectWrite). You can now run libass without
  fontconfig on these platforms. This fixes problems with
  fontconfig behaving badly on these platforms (it could take
  minutes to scan all system fonts). Even on Linux, this speeds
  up loading of embedded fonts (such as provided by
  ass_add_font()). The DirectWrite backend only works on Windows
  Vista and later. On XP, fontconfig is still needed. libass can
  be compiled with both DirectWrite and fontconfig, and then it
  will fallback to fontconfig automatically if DirectWrite is not
  available at runtime.
  * Add ass_get_available_font_providers() API function.
  * Change the 4th parameter of ass_set_fonts(). This now selects
  the font provider. This is somewhat backwards compatible with
  the old behavior, but if you ever passed values other than 0
  or 1, your application might break with this libass release.
  * The ass_fonts_update() function now does nothing. It's kept
  for backward compatibility only.
  * Much faster gaussian blur. This can bring a large speedup with
  big blurred signs and such.
  * Drop ENCA support
  * Bug fixes
  + Fix compilation of the freetype rasterizer (disabled by
  default)
  + Fix rendering with some cases of consecutive line breaks
  (\N\N).
  + Fix some memory allocation failure checks
  + Avoid system locale dependent behavior by reinventing some
  standard C functions
  + Fix rendering errors with strikes (GH #193)
  + MSVC compilation fixes
- Enable harfbuzz and yasm build requires</changelog>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="8f3040e6fd1edd5755f780013ec9ed0c82bcd25f0cf1509c7d36a2f93d460e1b" name="libatomic1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="36700b4007bd249d25152d0a00a3819cc146a9be104ed6a5181e9157c20a8173" name="libatomic1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5f53f5ec9becc3cde3e2f25c7f62fd28f5b02d7dc159505d382377473fb9ed4c" name="libatomic1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f3adfcb0eee0806b987f7dc6731ef814bf617626f769762e24caca2564971d20" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="71d9fa77165cd928a8b8e942d1930c9287c2aa8ccecc53e98e0d9bb4506cd95e" name="libatomic1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a500a744bc83504f43a9f3326b15d01d4f69586273786ae4e3f85369b2167caf" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b94aca7c8d4e08a07826f3e8e99a37aef7c8b5179c687abd12c8b084b5c6c190" name="libavcodec-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="81ac2a4a27f6a7eb2876b92ac3ab22bbdb433a7019b26860030a0a9caf5ef6fe" name="libavcodec-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="5eb318b1b89b88234c503a7da4890c03295e489389ba066f9fde9fe3d7f4a7a3" name="libavcodec-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="d2de910a3eb857ad8c100f24a5f70348436517b93d9f2a77586765dd38665790" name="libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="ba68c903ee5679aef07a10e99562266f3b59c1bfcba60df9345ff19602ec3c14" name="libavcodec57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="eb8ace96c30ad26b0313da76ddebbae03dde3dd0839e28a17555f7d964e37452" name="libavcodec57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="2677a8923dcecebff87dad520090e52b0548cc8433d01958f7edccf118f5bbd7" name="libavcodec57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="ac1abaee1b6a083769ffa974d5cc6269e6e3fb277be262a3f23573f6c1f6f94f" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="5db0d009479894ce73d57694027df965140d58de514cd3a2865312259ccae27f" name="libavcodec57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="d25831e6f5e61ab995e5beec939c58ab23b156f7f2059b1689a3da1007ef735f" name="libavdevice-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="e2d216e3596e6a9337fe245b82b2a48b08daa06d3f3ca1feda5a13b8ee9fe3ea" name="libavdevice-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="df411291cfba19e87342081cdfea337b55d0d6906acd00c84febace6ac092bff" name="libavdevice-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="595db16640475b221b679410edc19cdf1060fdf99ab9e23a318546074e827ad5" name="libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="a56f7280924a14e5fe225235acdacdf95002e17dc2713bae63d2120d64bc6e22" name="libavdevice57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="0a72337b092a14c7a2b43f4f7fc81203e4dff0c5be31c0e6b030f9c5d2b8477d" name="libavdevice57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="9801b13deb9790f5cf6153d9e9d3d415bde5c2e7f095bb7dfbb5b52607c56d52" name="libavdevice57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="e071629e4996d16ec39212fef5ee1e92e371c2bd69499e90d4e861004f0012e8" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="451975cae5a995b5577e7335cbed90559693a5bd4a34d32f13b517f5c3d3a8a3" name="libavdevice57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="9e9a30a9d1ba483d48eb6b420d31b9398948f34061fc513603f3a0142bd4c284" name="libavfilter-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="68c07f8782f91c7b3653e482155acccb29fb34f8d692cec8fabcd0e1f2e37060" name="libavfilter-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="5ae04732f83a6941311d21eb13f7b2182f076ace3469c50537c27d323ada3167" name="libavfilter-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="62cb6e1e62baaee6c08e7181b63640c4d324c5bbade306d9b98775c8ea7b54ec" name="libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="8bca57f59ec34bdcf44d9f16ccec53c540a69285b674ce90c601cf3b7a35c848" name="libavfilter6" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="dd56bff2ab5294635eba95ebdaf17e71fda363116face7d4c21b902d7ea2b563" name="libavfilter6" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="bab264b4274bd1fe15e53301d374190baa5f38370fa0f80022a71750aaa02ea9" name="libavfilter6" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="a62b2e7b1c4c13730a795b9838bd73fd086ac8a60ad7c2d9f808333cce8ede25" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="cc1e361411ac60676db92620859c13e87258d115cd744d99c6d767ff9fde6294" name="libavfilter6-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="b40225b7e25ad1dc2d9542fd4512a9f716af2a96981663e6f105d51a3076c678" name="libavformat-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="643fdf204aeb71763c5b7a80087a1343cf1c357118d764288796a354f908b777" name="libavformat-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="d4dd1740e4eef1b585c35524cd256935b8a95559225f627513f0524db1798bb6" name="libavformat-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="9f1f2ac2ecff19d0cacea9bd9b3af1a8dde7dd6cd3394cc4943a413028f85a97" name="libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="9900e39a31cc304331508a780756329399b73237e1480370a3eee6a1d1952b73" name="libavformat57" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="3eb0d18b91c9cd66f616c31cfb55f3e2638262b0117616e5f795e8c69fd92c81" name="libavformat57" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="e781aefb5f18b368e8ab71b8cbe9e6bbb830335ae31af7b2fe1ea0b22f3c0f68" name="libavformat57" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="ec9919062e1c25187ccaf4c92e59b2ef937eb4553512c006211aca952b1a2548" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="e27768100e4b50ca5c4cf0940d3cb95396882a2abca76a9c942890107399452f" name="libavformat57-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="b4f8221c3e087bfff9298b3443977a57e65acd923d9eb8ac353c525771cc063f" name="libavresample-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="9fe634847182c5c8db4830d7152a4e149ea1852cfaba0f17095b4ba7fefafbef" name="libavresample-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="686e41571e6b547f03775ac5052ba215e099a2214458f38d6feba41418da2c57" name="libavresample-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="9d83b75f32a8c396907bd32f0a245918c25e60adae0e6d177e5c90dac052b3f4" name="libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="7cd9775d54834142e1146a2b2ca2d09574c1f6a959cfab4f01229d72c8b82639" name="libavresample3" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="bc96e37847b51a9c0b4a01e4642549b14d0a9f3e7c0060789f1383a02e5b7cb3" name="libavresample3" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="26c69ccdaa5714761dfce1559edba8b0309e06bdd8dcede7bec8ccb31f1b6ca2" name="libavresample3" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="a9664641239712223660245a0cf2aae0ddc20b5a04ce6f6d7e05d30b064bb2c6" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="f65851749da016ef52e19f165edef51b0d5db2b936e463f4d054c83311983c20" name="libavresample3-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="1b343cca4f08546d93ffe194efed74528c35ecea6a447fb96a1e7dc926bf6d5b" name="libavutil-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="01713ef766f4435fbf0f6b8598ee7b68570869a61542e1e94fe2714eb3fc9a27" name="libavutil-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="d00b97d1e3fefb9c641b88d4f94c1ab89292eed7095edff003e54beca5233a47" name="libavutil-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="3a5539625c7c2e8b66270292b15b8dbd91a2214a7daf021ecd2c96bed3d25e08" name="libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="71ffc6c2d54b1228ad9cddbdc825e4f553be34a49afb0a34f136f5182e58823a" name="libavutil55" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="12972edaf3785a79d87464e79497ea2f889efe58ac6c57ff886a648936ef4aad" name="libavutil55" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="84d0b72b8168608bd0af4f3c3df1b55b67039b4851c456e9829a433f5faebe06" name="libavutil55" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="ad9d46286531956f3a21da6aadbc9f57bff997784ba4b250a051fc18b99baf7d" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="7209b519bd3736a7eda8cbbc9b90a40933cef658ed1fe772c0b0b5d1fb4548ee" name="libavutil55-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="38eaac1c8e3c11235d07f924d0fa53c5ead4371ae18e654316a066c3b2bdb1a2" name="libbind9-1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fd355fdb16df73ae6c92cec53e5c6dbd2a66906eafd61c31dbfc5d40e966579c" name="libbind9-1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="df4f2a15a5e023f747c62f4711c08b72c88f2e7acea3bb819008a473d0cd0ae6" name="libbind9-1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a45d38072f007d46c30f03875c9cec69b689567187c269205fc1083067af5caf" name="libbind9-1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="10e88b0e7bc7a6e988d874794298a141a2cd41fcbea625fc5ae9f1b186cf7259" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="7f9bca50a2b3494466d45a9ca8ee529e50edd816c367645f48b6dd9a4ecada37" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="ba9d69581658524505f6fcff703eeffd3d5e06e393592e97cdd5b0132e92bde7" name="libbluetooth3" arch="ppc64le">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="43823a238f29f3aadc13421c95c068062d7be5616fb4517cf049bafc7c1fdddf" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="b8ef01fe9aa7500fad8365a3f634bb0c82700fa00dedad0ea4baa0ba689c32d6" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.55" rel="3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
</package>
<package pkgid="e13f206a6eb0a52bc2dd43548bfcfa5db588fcb04c817c515c6785ca32e8fe89" name="libcephfs-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5c0c0bffc4457e9cf72df08c1407d9b50f11c83ae77c3a6996d52359d712e3c9" name="libcephfs-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1c3002b1efc60aed4f9628d141d380e1ccc11da683a29e91d273f4b89f744d04" name="libcephfs-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="17b6e7b9d9832f2bd3e4623bf5e6afc5eccce232bee72b0d0d2a8bf1ca591873" name="libcephfs-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="20d8b0692deecda9621601af65f01f6405ebc4c438a13987454b0ae95de3f50a" name="libcephfs-devel" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="03c0ac56ad67642fd1e3b719293bc5c3d710f26d4f93f8ecd3a3e2fabf2fd7d4" name="libcephfs-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="945f40df9178640b3ee85578878201175d3a3a728161662f63e5c803ae86cb05" name="libcephfs-devel" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="d2342b480deba7bcfd3401741f7a1159b9fa3bdd8a1c2b996982a0f214b7a5d9" name="libcephfs-devel" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="2bf57d4cb71f89c483614b877c767ac128b6859127eb4b624cc57dc5489cf0f3" name="libcephfs2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="33e1221dc3590caf44e52eb641503c6a313f48f3df9954f0b1ea95a81807c8c5" name="libcephfs2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b73093fcf1f8f732c3a4be84ddaa5875651069d06ca4c82f3c6565688c076a45" name="libcephfs2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c2ff6484fd284df8ae2bfd458104f8a65d5c130e7fc49826bd64d8913ddbcdf6" name="libcephfs2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3a5ef289a42238cd153dff09138e13ebe11a05c6d7230451f236986c9e238649" name="libcephfs2" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="6e2b0272695ea1354bfb2bf82a193964bfbce32f80c0738aedf70b3f1c2d197e" name="libcephfs2" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="da9ced8885cce374b041057cdfd3011a42a49fb59802c5574ca09a68f9998b9a" name="libcephfs2" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="93606c08ed0acd6ab986bf2e75e0dfca5e7709f82f6ae8c3ffe3a4bd49fc232f" name="libcephfs2" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="b50e3a89ad188f3c04097e6ba12f2ddca230edaf25df4152016e63fea10c7ed8" name="libclamav9" arch="aarch64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="fd423b560b303d778c9fdf4ecb9dd7c8c56c7e4894ea8531e3aacc4a3d8462bf" name="libclamav9" arch="ppc64le">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="07b77a0c0e489e3cb71cd53405ed5cba7fd77b782266b7758531b53162e86f24" name="libclamav9" arch="s390x">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="4db2099f963674bcbeee87ee24f228a42294de75bfc4b107b60cb1caff0804a3" name="libclamav9" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="6d35c9738c2f23abfd89d63c92a95093c9a820a118cbe65e7e260cecc21a9214" name="libcpupower0" arch="aarch64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="3fb79db5eca1692a997f1f49dabb70e82c18c184b5b7373342c4653fb3bb58fe" name="libcpupower0" arch="ppc64le">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="69504c606ca7c4723b67f55cecb0782e3563697ddd9fea2bd6a51e16bafd1350" name="libcpupower0" arch="s390x">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="14e0719ed9e1a57a46646456b530ece6429878976e4b837d42aeac6adf07404a" name="libcpupower0" arch="x86_64">
  <version epoch="0" ver="5.10" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
</package>
<package pkgid="7f4eea114d17d5a8d8a7555204cec7b7cae0f88a52e1cfd9c87d398c1f71ac11" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e06dd31f233850cb96b6e46d7f7a9ffa090e6855a5d4391914f3bab50b5c7559" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2199566a33b6704fed1a0f02d64469a9983ad63dd895712e121a47c53352a486" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="34e74c96f652c02eb1675b29b04f705575b6ad081cbb9305f60d0c8a96866e2d" name="libcurl-devel" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="09c7a117f07f912f7d6b0c6aa6bcc4afaaf35bd28167bf33324b82e830fc1a0e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="61e1ff717789c8b4963c79673f6be9628900e40ed7868cd934913b3b70bbf7f3" name="libcurl-mini-devel" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="b399bd21183b5202a844572c3a85a227d5087e8ae78e7abb027e5274e9c05b24" name="libcurl-mini-devel" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e5092f406b10fdf98460122eafc27a447e21ddcc9093f72b90ce7b9db84a1308" name="libcurl-mini-devel" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="d7d7557db8b60349cc498e0ac1815a2a7c31c98a5d943d586280af38eeaa22e8" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2e963d20072fc86d88dfe0cc29994de87b59ee038cffc0ba079db54982bff4a9" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ed8cead9f99d97dd7bac3e472d6694754d14a6cd9c2dfefb0adc2d5030d84705" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="1edc326b11b96d284ca81ad2752abf53a59db11df8d89303d9fd9904ae62b1fd" name="libcurl4" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2664f7622d43936acae8c4c212dd0004d4a4753dc4a271f902d41d60de9bdbcd" name="libcurl4" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="67161338cafa2692a81b44fa2b4ccf26be41570d219adc5be96a1eb52c0d9e04" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f266fc6785e956e5db22b216b0ce31e3456e6afac6436f935afc7fa3208355f7" name="libcurl4-mini" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="98f1285a54b3e6014e017508da5cd555a6be81fd1bd4046f0ca97385ffa58421" name="libcurl4-mini" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7f86c5620eded4a015dedfb2514ee1b567a05688e4d8cdcf80942f8739cb059e" name="libcurl4-mini" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="c98cf34671d647d3a5a4812610902cdf8b19202755a9f10c68f326faa1e87719" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="078ce6800951e1e8e04287ff4b5cb7689090c238a7a7d4252b53c6755ec694d9" name="libdbus-1-3" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="b4e3e4479030df42c014687806888577e13142fe42f83c8044422d0b29a9d64a" name="libdbus-1-3" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="109cc3e3602320c14864d1152077e90259d7e4700c819b0951c9d109c79ea6ab" name="libdbus-1-3" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="e8ab1d6499d9a117295bd7333a8b5ff18bf6d68606cab87fc97bdebf23b049d1" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="9c3016d34d806466337126aab995ce0fc6b935bce5c7a46c10d6ff44749b10e3" name="libdbus-1-3-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.6.1"/>
  <changelog author="sflees@suse.de" date="1486036800">- A note for scripts bsc#974092 (remove sysvinit script) is already
  fixed here.</changelog>
  <changelog author="sflees@suse.de" date="1488369600">- Update to 1.10.16
  Fixes:
  * Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.
  (fd.o #99828, Simon McVittie) (bsc#1025950)
  * Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie) (bsc#1025951)
  * Work around an undesired effect of the fix for CVE-2014-3637
  (fd.o #80559), in which processes that frequently send fds, such as
  logind during a flood of new PAM sessions, can get disconnected for
  continuously having at least one fd "in flight" for too long;
  dbus-daemon interprets that as a potential denial of service attack.
  The workaround is to disable that check for uid 0 process such as
  logind, with a message in the system log. The bug remains open while
  we look for a more general solution.
  (fd.o #95263, LP#1591411; Simon McVittie)
  * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  was disabled at compile time. That test is not expected to work
  in that configuration. (fd.o #98665, Simon McVittie)
  Enhancements:
  * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)</changelog>
  <changelog author="fstrba@suse.com" date="1491566400">- Update to 1.10.18
  * Fixes
    + Re-order dbus-daemon startup so that on SELinux systems, the
    thread that reads AVC notifications retains the ability to
    write to the audit log (fdo#92832, Debian #857660; Laurent
    Bigonville)
    + Fix a harmless read overflow and some memory leaks in a unit
    test (fdo#100568, Philip Withnall)</changelog>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  ? [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  ? &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  ? dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  ? New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  ? The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  ? DTDs for introspection XML and bus configuration are installed.
  ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=?.
  See the release notes for dbus 1.11.14 and spec version 0.31.
  ? [Unix] New option "dbus-launch --exit-with-x11".
  ? [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  ? [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  ? [Unix] Internal warnings are logged to syslog if configured.
  ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
</package>
<package pkgid="4a45b61eb44cd31bde3046bb33db5eb513bcadae5204623c0f24aaff562ad8b8" name="libdevmapper-event1_03" arch="aarch64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="32f15ea4d2093b92acee9cf3d15ed7e2eb5f355cd963689f7e0331893c3b50d8" name="libdevmapper-event1_03" arch="ppc64le">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="13a193b2a4a8538aaa35cabd132bdf226133343f3d4623d3bdbbd2b27edcaaa8" name="libdevmapper-event1_03" arch="s390x">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="1d1c39b442a77db88fac36837c48d3b247fe276ff394824ed4bd5790174409e6" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="4d97c7c02dfa4673324c6a9e0f39f2a1f5b30bc55701672e7fab6c4957ba92ab" name="libdevmapper-event1_03-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="3a788c96d04572bc7157b96c4f6fb463617f2b22948c0b8138015557acb3c6a7" name="libdevmapper1_03" arch="aarch64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="788348b1e4aaefb76349448211aee4a301419c5e03449547007c836ae88581ea" name="libdevmapper1_03" arch="ppc64le">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="d62acd4e5b2371a3ec7e79f0d3a6f252adbcb32a5bf1a71b9819afe45cb649e4" name="libdevmapper1_03" arch="s390x">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="aee9f85d1876518b1553b3235ee90834d4bb8146959c16751c20ba5bc0258ecc" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="8f396d7250b9426b3d9d802073eb0d4f332448f68182a0019320cc716e025cca" name="libdevmapper1_03-32bit" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="c83500ae7be69fc43f8867535e0449cba17d1abac1dc7782e7c195fab2630067" name="libdjvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dc98b21ee9f68412ec75e2031d8f3833d0c8f46c94d9bd941d631034ade92d7b" name="libdjvulibre-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="0a6bef58f68b5fa07b2a48bcf4f157567730350a8000df8399873c4320e2916f" name="libdjvulibre-devel" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="eee6461e08130838ff272a115c09ec0811c2c3dcc5966aa73521b607076a67ed" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="27ba1d0d54fd347643be229a1036ecd2f85c40b83447a2820d5295fa24479c52" name="libdjvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="149dae69c68e3971c9948186653ff72c9f329d6a34c2155342664829954ffc25" name="libdjvulibre-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="d9573240d53ae69f8e09fa3929485bbfea8ff804c39fc72833cd7e43f9780d0f" name="libdjvulibre-devel" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="822f58ee0a719d08cc2fef07fddda20c9dff92f7b2aabb7a90ed2d4d94906e96" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="9b0f4727ee654189ed81763fb49af229861b2f24e7d1e148ca872303dc18edca" name="libdjvulibre21" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="28417c2eccbc9c0b11820e074128c08d80e15c0f67cdfda374d0f4fc5cebd0e5" name="libdjvulibre21" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="167aafd652a6f00a69f894153e63a742967d20fbe3a6d63d41f3fec6e7eb30f5" name="libdjvulibre21" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="a9f493f53f3d36c687e259c6f960b59f6227a2a3882ea2b4b643f615bbba5bfd" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="9430a5c88ae915f2479c2a5b12ae0b53b3c4a0769699bfb3d0f85011f7ceb2f2" name="libdjvulibre21" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="3efe7493d8a007474ce853529489b60b8adab956c2865095c4c66ee7b7ba9a45" name="libdjvulibre21" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="d12ea65ae823758b03f920217f199f1f2a3db9b11d7689d09dd51bc4472df5fc" name="libdjvulibre21" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="41e4bd9e341c7cc452429d691eeae3d0f586a6e57786374edd4a390cb556ca0c" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="e6f433d637ce58d3b0a9632f2feca23c30f52fe936f24cb64ea0546530cc204f" name="libdmmp-devel" arch="aarch64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="7aac64a7b5f012b6efd28122d92b7ce2eab7413319f12ff037aa1bca3fabbdba" name="libdmmp-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="c2cb4293aa912f5ad73a4112d5a8cbde2395f6946b79fa3f72e98fc44e9194d2" name="libdmmp-devel" arch="s390x">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="90df65b615aa75b3ad4650709249f117505b47fedcb73e81e65aa2ad0dce9207" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="5be53e01ce3f8e9285debed1b0a6685fd68664248cd407b0336639baae6d09ea" name="libdmmp0_2_0" arch="aarch64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="2d353128279a275cf8ef9f619558c1028fbdf12e599923d9a4d539a26c0ecbdb" name="libdmmp0_2_0" arch="ppc64le">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="8d26615a68d81f49118ecf88e90052387a81457d884b73c0fdfc13ba15310e2e" name="libdmmp0_2_0" arch="s390x">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="25204811c82b3403c9445a883dcb60aec47a343a31730ec30c82c9169cbdfab6" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="bf748bfe38cc481ca97726ebc3bd9071e204ecc7c78bf65830ac84d3c0c7e702" name="libdns1605" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="74678510949251db50335ca73f1609d4dee40aaa08818ae5f1e0ac15300902b6" name="libdns1605" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="dde510708e44bef912c721f25c218003f904696106aa9d234a831615666843dd" name="libdns1605" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="edc8e7842314014769d045dbf75a9dfe50e05e1dae69c7e62233ef415870f479" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4f643547e62800802abada311bbcd2bc860bb7b17f556049d0863ee3450785b6" name="libdpdk-20_0" arch="aarch64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="7c3bf03e084fd4b0f28ac2115d6422a814c7f326eece65bde4833de4c4e0de10" name="libdpdk-20_0" arch="ppc64le">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="4cfac95850e5d72771eb59816e420609c68103768d82914d7a586c6a58c4a82d" name="libdpdk-20_0" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="6.1"/>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="1ebadcfbd384ec2ce319a26803317cd63deb597bce1af7d2ef07880eee9b51c7" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.15.1" rel="8.5.1"/>
  <changelog author="mpost@suse.com" date="1583236800">- The zipl boot loader may crash during boot. The solution is to
  implement vsnprintf and make use of it. (bsc#1165317)
  * s390-tools-sles15sp2-01-zipl-libc-Introduce-vsnprintf.patch
  * s390-tools-sles15sp2-02-zipl-libc-Fix-potential-buffer-overflow-in-printf.patch
  * s390-tools-sles15sp2-03-zipl-libc-Replace-sprintf-with-snprintf.patch
  * s390-tools-sles15sp2-04-zipl-libc-Indicate-truncated-lines-in-printf-with.patch</changelog>
  <changelog author="mpost@suse.com" date="1583841600">- Added the following patches for bsc#1165978.
  zpcictl --reset only issues a SCLP reset and leaves the PCI function
  in an error state.
  Initiate an OS level recovery by calling /sys/bus/devices/&lt;dev&gt;/recover
  after the SCLP reset.
  * s390-tools-sles15sp2-01-zpcictl-Initiate-recover-after-reset.patch
  * s390-tools-sles15sp2-02-zpcictl-Rename-misleading-sysfs_write_data.patch
  * s390-tools-sles15sp2-03-zpcitctl-Exit-on-error-in-sysfs_report_error.patch</changelog>
  <changelog author="mpost@suse.com" date="1584532800">- Added the following patches to implement jsc#SLE-7471, Enhanced
  tooling for kvm guest images (bsc#1165549):
  * s390-tools-sles15sp2-01-zipl-fix-Wdiscarded-qualifiers.patch
  * s390-tools-sles15sp2-02-zipl-fix-Waddress-of-packed-member.patch
  * s390-tools-sles15sp2-03-zipl-remove-some-useless-__packed___-attributes.patch
  * s390-tools-sles15sp2-04-zipl-Fix-entry-point-for-stand-alone-kdump.patch
  * s390-tools-sles15sp2-05-zipl-Fix-dependency-generation-in-zipl-boot.patch
  * s390-tools-sles15sp2-06-zipl-Make-use-of-__packed-macro.patch
  * s390-tools-sles15sp2-07-zipl-define-__section-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-08-zipl-Make-use-of-__noreturn-macro.patch
  * s390-tools-sles15sp2-09-zipl-Define-__noinline-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-10-zipl-stage3-Mark-start_kernel-__noreturn.patch
  * s390-tools-sles15sp2-11-zipl-sclp-Remove-duplicate-macros.patch
  * s390-tools-sles15sp2-12-zipl-Make-address-size-mask-macros-UL.patch
  * s390-tools-sles15sp2-13-zipl-libc-Use-stdint.h-instead-of-self-defined-macro.patch
  * s390-tools-sles15sp2-14-zipl-Consolidate-IMAGE-macros.patch
  * s390-tools-sles15sp2-15-zipl-Consolidate-STAGE-2-3-macros.patch
  * s390-tools-sles15sp2-16-zipl-stfle-use-uint64_t-instead-of-u64.patch
  * s390-tools-sles15sp2-17-zipl-boot-fix-comment-in-stage3.lds.patch
  * s390-tools-sles15sp2-18-lib-zt_common-add-STATIC_ASSERT-macro.patch
  * s390-tools-sles15sp2-19-zipl-use-STATIC_ASSERT-macro-for-no-padding-verifica.patch
  * s390-tools-sles15sp2-20-Support-lib-zt_common.h-to-be-used-in-assembler-and-.patch
  * s390-tools-sles15sp2-21-zipl-move-IPL-related-definitions-into-separate-head.patch
  * s390-tools-sles15sp2-22-zipl-move-SIGP-related-functions-and-definitions-int.patch
  * s390-tools-sles15sp2-23-zipl-add-SIGP_SET_ARCHITECTURE-to-sigp.h-and-use-it.patch
  * s390-tools-sles15sp2-24-zipl-stage3-make-IPL_DEVICE-definition-consistent-wi.patch
  * s390-tools-sles15sp2-25-zipl-move-Linux-layout-definitions-into-separate-hea.patch
  * s390-tools-sles15sp2-26-zipl-tape0-use-constants-defined-in-linux_layout.h.patch
  * s390-tools-sles15sp2-27-zipl-use-STAGE3_ENTRY-for-STAGE3_LOAD_ADDRESS.patch
  * s390-tools-sles15sp2-28-zipl-move-loaders-layout-definitions-into-separate-h.patch
  * s390-tools-sles15sp2-29-zipl-s390.h-rename-inline-macro-into-__always_inline.patch
  * s390-tools-sles15sp2-30-zipl-move-__always_inline-barrier-__pa32-pa-to-zt_co.patch
  * s390-tools-sles15sp2-31-zipl-make-BLK_PWRT-unsigned-int.patch
  * s390-tools-sles15sp2-32-Consolidate-MIN-and-MAX-macros.patch
  * s390-tools-sles15sp2-33-zipl-remove-libc.h-include-in-s390.h.patch
  * s390-tools-sles15sp2-34-zipl-move-s390.h-to-include-boot-s390.h.patch
  * s390-tools-sles15sp2-35-zipl-libc-include-s390.h.patch
  * s390-tools-sles15sp2-36-include-boot-s390.h-move-panic-and-panic_notify-to-l.patch
  * s390-tools-sles15sp2-37-include-boot-s390.h-fixes-for-Werror-sign-conversion.patch
  * s390-tools-sles15sp2-38-zipl-refactor-all-EBCDIC-code-into-separate-files.patch
  * s390-tools-sles15sp2-39-zipl-sclp-add-macros-for-the-control-program-masks.patch
  * s390-tools-sles15sp2-40-zipl-sclp-add-sclp_print_ascii.patch
  * s390-tools-sles15sp2-41-zipl-libc-printf-print-on-linemode-and-ASCII-console.patch
  * s390-tools-sles15sp2-42-Consolidate-ALIGN-__ALIGN_MASK-ARRAY_SIZE-macros.patch
  * s390-tools-sles15sp2-43-genprotimg-boot-initial-bootloader-support.patch
  * s390-tools-sles15sp2-44-genprotimg-boot-use-C-pre-processor-for-linker-scrip.patch
  * s390-tools-sles15sp2-45-genprotimg-add-relocator-for-stage3b.patch
  * s390-tools-sles15sp2-46-README.md-remove-useless-empty-line.patch
  * s390-tools-sles15sp2-47-include-boot-s390.h-add-guard-for-struct-__vector128.patch
  * s390-tools-sles15sp2-48-genprotimg-introduce-new-tool-for-the-creation-of-PV.patch
- Added a BuildRequires for glib2-devel to support the new feature.
- Added a %dir entry for /usr/share/s390-tools/genprotimg</changelog>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1595592000">- The location of the udevadm binary was changed from /sbin/ to /usr/bin
  a while back. A symbolic link was added for compatibility. In the latest
  versions, that symbolic link has been removed, requiring changes to scripts
  that were depending on that.
  Added the following patches for bsc#1171587
  * s390-tools-sles15sp2-lsluns-try-harder-to-find-udevadm.patch
  * s390-tools-sles15sp2-znetconf-introduce-better-ways-to-locate-udevadm.patch
  * s390-tools-sles15sp2-mon_tools-update-udevadm-location.patch</changelog>
  <changelog author="ro@suse.de" date="1600171200">- use libexecdir for net-snmp agent config</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1603800000">- Upgraded to version 2.15.0 (jsc#SLE-13662, jsc#SLE-13663,
  jsc#SLE-13667, jsc#SLE-13724, jsc#SLE-13728, jsc#SLE-13730,
  jsc#SLE-13739, jsc#SLE-13744, jsc#SLE-13751, jsc#SLE-13755,
  jsc#SLE-13765, jsc#SLE-13768, jsc#SLE-13777, jsc#SLE-13814,
  jsc#SLE-13819, jsc#SLE-13820)
- Reworked s390-tools-sles12-sysconfig-compatible-dumpconf.patch to fit the
  current version and renamed it to s390-tools-sles15-sysconfig-compatible-dumpconf.patch
- Removed the following obsolete patches:
  * s390-tools-sles15sp2-01-zkey-Separate-and-rework-CCA-host-library-loading.patch
  * s390-tools-sles15sp2-02-zkey-Move-utility-functions-into-separate-source-fil.patch
  * s390-tools-sles15sp2-03-zkey-Add-utility-function-to-get-the-serial-number-o.patch
  * s390-tools-sles15sp2-04-zkey-Add-utility-function-to-get-the-mkvp-of-a-crypt.patch
  * s390-tools-sles15sp2-05-zkey-add-function-to-iterate-over-all-available-CCA-.patch
  * s390-tools-sles15sp2-06-zkey-Add-function-to-print-the-MKVPs-of-APQNs.patch
  * s390-tools-sles15sp2-07-zkey-Add-function-to-cross-check-APQNs-for-valid-mas.patch
  * s390-tools-sles15sp2-08-zkey-Add-function-to-obtain-the-mkvp-of-a-secure-key.patch
  * s390-tools-sles15sp2-09-zkey-Display-MKVP-when-validating-a-secure-key.patch
  * s390-tools-sles15sp2-10-zkey-Cross-check-APQNs-when-generating-secure-keys.patch
  * s390-tools-sles15sp2-11-zkey-Cross-check-APQNs-when-validating-secure-keys.patch
  * s390-tools-sles15sp2-12-zkey-Cross-check-APQNs-when-importing-secure-keys.patch
  * s390-tools-sles15sp2-13-zkey-Cross-check-APQNs-when-changing-APQN-associatio.patch
  * s390-tools-sles15sp2-14-zkey-Add-function-to-select-a-specific-CCA-adapter.patch
  * s390-tools-sles15sp2-15-zkey-Add-function-to-select-a-CCA-adapter-by-mkvp.patch
  * s390-tools-sles15sp2-16-zkey-Select-CCA-adapter-when-re-enciphering.patch
  * s390-tools-sles15sp2-17-zkey-cryptsetup-Add-to-new-and-from-old-options.patch
  * s390-tools-sles15sp2-18-zkey-Display-key-type-with-list-and-validate-command.patch
  * s390-tools-sles15sp2-19-zkey-Allow-to-filter-list-output-by-key-type.patch
  * s390-tools-sles15sp2-20-zkey-Allow-to-specify-the-key-type-with-the-generate.patch
  * s390-tools-sles15sp2-21-zkey-Preparations-for-introducing-a-new-key-type.patch
  * s390-tools-sles15sp2-22-zkey-Introduce-the-CCA-AESCIPHER-key-type.patch
  * s390-tools-sles15sp2-23-zkey-Add-wrappers-for-the-new-IOCTLs-with-fallback-t.patch
  * s390-tools-sles15sp2-24-zkey-Add-helper-functions-to-build-lists-of-APQNs.patch
  * s390-tools-sles15sp2-25-zkey-Add-support-for-generating-AES-CIPHER-keys.patch
  * s390-tools-sles15sp2-26-zkey-Add-support-for-validating-AES-CIPHER-keys.patch
  * s390-tools-sles15sp2-27-zkey-Add-support-for-re-enciphering-AES-CIPHER-keys.patch
  * s390-tools-sles15sp2-28-zkey-Check-crypto-card-level-during-APQN-cross-check.patch
  * s390-tools-sles15sp2-29-zkey-Add-helper-function-to-query-the-CCA-firmware-v.patch
  * s390-tools-sles15sp2-30-zkey-Add-helper-function-to-convert-secure-keys-betw.patch
  * s390-tools-sles15sp2-31-zkey-Add-helper-function-to-restrict-export-of-secur.patch
  * s390-tools-sles15sp2-32-zkey-Add-helper-function-to-check-an-AES-CIPHER-key.patch
  * s390-tools-sles15sp2-33-zkey-Add-key-checks-when-importing-a-CCA-AESCIPHER-k.patch
  * s390-tools-sles15sp2-34-zkey-Add-convert-command-to-convert-keys-from-one-ty.patch
  * s390-tools-sles15sp2-35-zkey-Allow-zkey-cryptsetup-setkey-to-set-different-k.patch
  * s390-tools-sles15sp2-zcrypt-CEX7S-exploitation-support.patch
  * s390-tools-sles15sp2-zcryptstats-Add-support-for-CEX7.patch
  * s390-tools-sles15sp2-zkey-Fix-listing-of-keys-on-file-systems-reporting-D.patch
  * s390-tools-sles15sp2-zkey-Fix-display-of-clear-key-size-for-XTS-keys.patch
  * s390-tools-sles15sp2-zkey-Fix-display-of-XTS-attribute-for-validate-comma.patch
  * s390-tools-sles15sp2-zkey-Fix-display-of-clear-key-size-for-CCA-AESCIPHER.patch
  * s390-tools-sles15sp2-01-zipl-libc-Introduce-vsnprintf.patch
  * s390-tools-sles15sp2-02-zipl-libc-Fix-potential-buffer-overflow-in-printf.patch
  * s390-tools-sles15sp2-03-zipl-libc-Replace-sprintf-with-snprintf.patch
  * s390-tools-sles15sp2-04-zipl-libc-Indicate-truncated-lines-in-printf-with.patch
  * s390-tools-sles15sp2-01-zpcictl-Initiate-recover-after-reset.patch
  * s390-tools-sles15sp2-02-zpcictl-Rename-misleading-sysfs_write_data.patch
  * s390-tools-sles15sp2-03-zpcitctl-Exit-on-error-in-sysfs_report_error.patch
  * s390-tools-sles15sp2-01-zipl-fix-Wdiscarded-qualifiers.patch
  * s390-tools-sles15sp2-02-zipl-fix-Waddress-of-packed-member.patch
  * s390-tools-sles15sp2-03-zipl-remove-some-useless-__packed___-attributes.patch
  * s390-tools-sles15sp2-04-zipl-Fix-entry-point-for-stand-alone-kdump.patch
  * s390-tools-sles15sp2-05-zipl-Fix-dependency-generation-in-zipl-boot.patch
  * s390-tools-sles15sp2-06-zipl-Make-use-of-__packed-macro.patch
  * s390-tools-sles15sp2-07-zipl-define-__section-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-08-zipl-Make-use-of-__noreturn-macro.patch
  * s390-tools-sles15sp2-09-zipl-Define-__noinline-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-10-zipl-stage3-Mark-start_kernel-__noreturn.patch
  * s390-tools-sles15sp2-11-zipl-sclp-Remove-duplicate-macros.patch
  * s390-tools-sles15sp2-12-zipl-Make-address-size-mask-macros-UL.patch
  * s390-tools-sles15sp2-13-zipl-libc-Use-stdint.h-instead-of-self-defined-macro.patch
  * s390-tools-sles15sp2-14-zipl-Consolidate-IMAGE-macros.patch
  * s390-tools-sles15sp2-15-zipl-Consolidate-STAGE-2-3-macros.patch
  * s390-tools-sles15sp2-16-zipl-stfle-use-uint64_t-instead-of-u64.patch
  * s390-tools-sles15sp2-17-zipl-boot-fix-comment-in-stage3.lds.patch
  * s390-tools-sles15sp2-18-lib-zt_common-add-STATIC_ASSERT-macro.patch
  * s390-tools-sles15sp2-19-zipl-use-STATIC_ASSERT-macro-for-no-padding-verifica.patch
  * s390-tools-sles15sp2-20-Support-lib-zt_common.h-to-be-used-in-assembler-and-.patch
  * s390-tools-sles15sp2-21-zipl-move-IPL-related-definitions-into-separate-head.patch
  * s390-tools-sles15sp2-22-zipl-move-SIGP-related-functions-and-definitions-int.patch
  * s390-tools-sles15sp2-23-zipl-add-SIGP_SET_ARCHITECTURE-to-sigp.h-and-use-it.patch
  * s390-tools-sles15sp2-24-zipl-stage3-make-IPL_DEVICE-definition-consistent-wi.patch
  * s390-tools-sles15sp2-25-zipl-move-Linux-layout-definitions-into-separate-hea.patch
  * s390-tools-sles15sp2-26-zipl-tape0-use-constants-defined-in-linux_layout.h.patch
  * s390-tools-sles15sp2-27-zipl-use-STAGE3_ENTRY-for-STAGE3_LOAD_ADDRESS.patch
  * s390-tools-sles15sp2-28-zipl-move-loaders-layout-definitions-into-separate-h.patch
  * s390-tools-sles15sp2-29-zipl-s390.h-rename-inline-macro-into-__always_inline.patch
  * s390-tools-sles15sp2-30-zipl-move-__always_inline-barrier-__pa32-pa-to-zt_co.patch
  * s390-tools-sles15sp2-31-zipl-make-BLK_PWRT-unsigned-int.patch
  * s390-tools-sles15sp2-32-Consolidate-MIN-and-MAX-macros.patch
  * s390-tools-sles15sp2-33-zipl-remove-libc.h-include-in-s390.h.patch
  * s390-tools-sles15sp2-34-zipl-move-s390.h-to-include-boot-s390.h.patch
  * s390-tools-sles15sp2-35-zipl-libc-include-s390.h.patch
  * s390-tools-sles15sp2-36-include-boot-s390.h-move-panic-and-panic_notify-to-l.patch
  * s390-tools-sles15sp2-37-include-boot-s390.h-fixes-for-Werror-sign-conversion.patch
  * s390-tools-sles15sp2-38-zipl-refactor-all-EBCDIC-code-into-separate-files.patch
  * s390-tools-sles15sp2-39-zipl-sclp-add-macros-for-the-control-program-masks.patch
  * s390-tools-sles15sp2-40-zipl-sclp-add-sclp_print_ascii.patch
  * s390-tools-sles15sp2-41-zipl-libc-printf-print-on-linemode-and-ASCII-console.patch
  * s390-tools-sles15sp2-42-Consolidate-ALIGN-__ALIGN_MASK-ARRAY_SIZE-macros.patch
  * s390-tools-sles15sp2-43-genprotimg-boot-initial-bootloader-support.patch
  * s390-tools-sles15sp2-44-genprotimg-boot-use-C-pre-processor-for-linker-scrip.patch
  * s390-tools-sles15sp2-45-genprotimg-add-relocator-for-stage3b.patch
  * s390-tools-sles15sp2-46-README.md-remove-useless-empty-line.patch
  * s390-tools-sles15sp2-47-include-boot-s390.h-add-guard-for-struct-__vector128.patch
  * s390-tools-sles15sp2-48-genprotimg-introduce-new-tool-for-the-creation-of-PV.patch
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
  * s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  * s390-tools-sles15sp2-vmcp-exit-code.patch
  * s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  * s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  * s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
  * s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  * s390-tools-sles15sp2-lsluns-try-harder-to-find-udevadm.patch
  * s390-tools-sles15sp2-znetconf-introduce-better-ways-to-locate-udevadm.patch
  * s390-tools-sles15sp2-mon_tools-update-udevadm-location.patch
  * s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch
  * s390-tools-sles15sp1-zdev-Also-include-the-ctc-driver-in-the-initrd.patch not in spec file
  * s390-tools-sles15sp2-Close-file-descriptor-when-checking-for-read-only.patch not in spec file</changelog>
  <changelog author="mpost@suse.com" date="1607342400">- Upgraded to version 2.15.1. (bsc#1178250, jsc#SLE-13663)
- Added s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  (bsc#1178313). When specifying an incorrect program option, dasdfmt segfaults
  as the format string for the corresponding error message has no parameter.
- Added s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  (bsc#1178315). The fdasd command was failing if sysfs was mounted this way:
  mount -t sysfs none /sys
  To make sure that the mount point of the sysfs is still found when mounted
  with a device keyword specified other than 'sysfs', check for the filesystem
  type instead, which is more specific.
- Added the following patches for bsc#1178427, and jsc#SLE-13768,
  Log DASD info for endpoint security
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
- Added the following patch for bsc#1178628 and jsc#SLE-13765, Converged
  HiperSockets/Ethernet Interface
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
- Added the following patches for bsc#1178992 and jsc#SLE-13772, Add host-key
  document verification support to genprotimg.
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
- Added the following patch for bsc#1178734. Running zcryptstats when many domains
  are available per cryto card does not produce any output, and is hanging in a loop.
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
- Reworked and renamed the following patches to accommodate changes made by IBM
  to the structure of the dasdfmt command.
  * s390-tools-sles15-Allow-multiple-device-arguments.patch renamed to
    s390-tools-sles15sp3-Allow-multiple-device-arguments.patch.
  * s390-tools-sles15-Format-devices-in-parallel.patch renamed to
    s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch renamed to
    s390-tools-sles15sp3-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch renamed to
    s390-tools-sles15sp3-Implement-f-for-backwards-compability.patch renamed to
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1611835200">- Moved %dir %{_libdir}/zkey and %{_libdir}/zkey/zkey-ekmfweb.so
  from the libekfmweb1 package to the main package since it is a
  plugin for the zkey command, and not a shared library.
  (bsc#1180534)</changelog>
  <changelog author="mpost@suse.com" date="1613563200">- Added s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  (bsc#1182113)
  Problem:  The KMS configuration property names to store the CCA and
    EP11 APQNs are incorrect, i.e. swapped.
  Solution: Correct the KMS configuration property names.</changelog>
  <changelog author="mpost@suse.com" date="1614427200">- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Made for the following changes for bsc#1182816:
  * Updated s390-tools-sles15sp3-Format-devices-in-parallel.patch to
    change all instances of the progress bar from printing "#" to
    printing the process number of the DASD volume being formatted.
  * Updated s390-tools-sles15sp3-Implement-Y-yast_mode.patch to print
    out the numbder of cylinders in a device, as was done in the
    prior versions of this patch, but was missed when modifying it
    for SLES15 SP3.
  * Added s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
    because otherwise a warning message from dasdfmt is being generated
    that could interfere with YaST properly processing the progress
    of the formatting process.</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch (bsc#1183039)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Added s390-tools-sles15sp3-remove-no-pie-link-arguments.patch so
  that we can build on systems with binutils 2.36 and higher. Without
  this, the build fails because that version of the ld command
  doesn't recognize "-no-pie" an acceptable argument.
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
</package>
<package pkgid="b9acba6235a2017a20e39d1391e96127826deec35f241736f2ebf3ff2b4bf626" name="libekmfweb1-devel" arch="s390x">
  <version epoch="0" ver="2.15.1" rel="8.5.1"/>
  <changelog author="mpost@suse.com" date="1583236800">- The zipl boot loader may crash during boot. The solution is to
  implement vsnprintf and make use of it. (bsc#1165317)
  * s390-tools-sles15sp2-01-zipl-libc-Introduce-vsnprintf.patch
  * s390-tools-sles15sp2-02-zipl-libc-Fix-potential-buffer-overflow-in-printf.patch
  * s390-tools-sles15sp2-03-zipl-libc-Replace-sprintf-with-snprintf.patch
  * s390-tools-sles15sp2-04-zipl-libc-Indicate-truncated-lines-in-printf-with.patch</changelog>
  <changelog author="mpost@suse.com" date="1583841600">- Added the following patches for bsc#1165978.
  zpcictl --reset only issues a SCLP reset and leaves the PCI function
  in an error state.
  Initiate an OS level recovery by calling /sys/bus/devices/&lt;dev&gt;/recover
  after the SCLP reset.
  * s390-tools-sles15sp2-01-zpcictl-Initiate-recover-after-reset.patch
  * s390-tools-sles15sp2-02-zpcictl-Rename-misleading-sysfs_write_data.patch
  * s390-tools-sles15sp2-03-zpcitctl-Exit-on-error-in-sysfs_report_error.patch</changelog>
  <changelog author="mpost@suse.com" date="1584532800">- Added the following patches to implement jsc#SLE-7471, Enhanced
  tooling for kvm guest images (bsc#1165549):
  * s390-tools-sles15sp2-01-zipl-fix-Wdiscarded-qualifiers.patch
  * s390-tools-sles15sp2-02-zipl-fix-Waddress-of-packed-member.patch
  * s390-tools-sles15sp2-03-zipl-remove-some-useless-__packed___-attributes.patch
  * s390-tools-sles15sp2-04-zipl-Fix-entry-point-for-stand-alone-kdump.patch
  * s390-tools-sles15sp2-05-zipl-Fix-dependency-generation-in-zipl-boot.patch
  * s390-tools-sles15sp2-06-zipl-Make-use-of-__packed-macro.patch
  * s390-tools-sles15sp2-07-zipl-define-__section-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-08-zipl-Make-use-of-__noreturn-macro.patch
  * s390-tools-sles15sp2-09-zipl-Define-__noinline-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-10-zipl-stage3-Mark-start_kernel-__noreturn.patch
  * s390-tools-sles15sp2-11-zipl-sclp-Remove-duplicate-macros.patch
  * s390-tools-sles15sp2-12-zipl-Make-address-size-mask-macros-UL.patch
  * s390-tools-sles15sp2-13-zipl-libc-Use-stdint.h-instead-of-self-defined-macro.patch
  * s390-tools-sles15sp2-14-zipl-Consolidate-IMAGE-macros.patch
  * s390-tools-sles15sp2-15-zipl-Consolidate-STAGE-2-3-macros.patch
  * s390-tools-sles15sp2-16-zipl-stfle-use-uint64_t-instead-of-u64.patch
  * s390-tools-sles15sp2-17-zipl-boot-fix-comment-in-stage3.lds.patch
  * s390-tools-sles15sp2-18-lib-zt_common-add-STATIC_ASSERT-macro.patch
  * s390-tools-sles15sp2-19-zipl-use-STATIC_ASSERT-macro-for-no-padding-verifica.patch
  * s390-tools-sles15sp2-20-Support-lib-zt_common.h-to-be-used-in-assembler-and-.patch
  * s390-tools-sles15sp2-21-zipl-move-IPL-related-definitions-into-separate-head.patch
  * s390-tools-sles15sp2-22-zipl-move-SIGP-related-functions-and-definitions-int.patch
  * s390-tools-sles15sp2-23-zipl-add-SIGP_SET_ARCHITECTURE-to-sigp.h-and-use-it.patch
  * s390-tools-sles15sp2-24-zipl-stage3-make-IPL_DEVICE-definition-consistent-wi.patch
  * s390-tools-sles15sp2-25-zipl-move-Linux-layout-definitions-into-separate-hea.patch
  * s390-tools-sles15sp2-26-zipl-tape0-use-constants-defined-in-linux_layout.h.patch
  * s390-tools-sles15sp2-27-zipl-use-STAGE3_ENTRY-for-STAGE3_LOAD_ADDRESS.patch
  * s390-tools-sles15sp2-28-zipl-move-loaders-layout-definitions-into-separate-h.patch
  * s390-tools-sles15sp2-29-zipl-s390.h-rename-inline-macro-into-__always_inline.patch
  * s390-tools-sles15sp2-30-zipl-move-__always_inline-barrier-__pa32-pa-to-zt_co.patch
  * s390-tools-sles15sp2-31-zipl-make-BLK_PWRT-unsigned-int.patch
  * s390-tools-sles15sp2-32-Consolidate-MIN-and-MAX-macros.patch
  * s390-tools-sles15sp2-33-zipl-remove-libc.h-include-in-s390.h.patch
  * s390-tools-sles15sp2-34-zipl-move-s390.h-to-include-boot-s390.h.patch
  * s390-tools-sles15sp2-35-zipl-libc-include-s390.h.patch
  * s390-tools-sles15sp2-36-include-boot-s390.h-move-panic-and-panic_notify-to-l.patch
  * s390-tools-sles15sp2-37-include-boot-s390.h-fixes-for-Werror-sign-conversion.patch
  * s390-tools-sles15sp2-38-zipl-refactor-all-EBCDIC-code-into-separate-files.patch
  * s390-tools-sles15sp2-39-zipl-sclp-add-macros-for-the-control-program-masks.patch
  * s390-tools-sles15sp2-40-zipl-sclp-add-sclp_print_ascii.patch
  * s390-tools-sles15sp2-41-zipl-libc-printf-print-on-linemode-and-ASCII-console.patch
  * s390-tools-sles15sp2-42-Consolidate-ALIGN-__ALIGN_MASK-ARRAY_SIZE-macros.patch
  * s390-tools-sles15sp2-43-genprotimg-boot-initial-bootloader-support.patch
  * s390-tools-sles15sp2-44-genprotimg-boot-use-C-pre-processor-for-linker-scrip.patch
  * s390-tools-sles15sp2-45-genprotimg-add-relocator-for-stage3b.patch
  * s390-tools-sles15sp2-46-README.md-remove-useless-empty-line.patch
  * s390-tools-sles15sp2-47-include-boot-s390.h-add-guard-for-struct-__vector128.patch
  * s390-tools-sles15sp2-48-genprotimg-introduce-new-tool-for-the-creation-of-PV.patch
- Added a BuildRequires for glib2-devel to support the new feature.
- Added a %dir entry for /usr/share/s390-tools/genprotimg</changelog>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1595592000">- The location of the udevadm binary was changed from /sbin/ to /usr/bin
  a while back. A symbolic link was added for compatibility. In the latest
  versions, that symbolic link has been removed, requiring changes to scripts
  that were depending on that.
  Added the following patches for bsc#1171587
  * s390-tools-sles15sp2-lsluns-try-harder-to-find-udevadm.patch
  * s390-tools-sles15sp2-znetconf-introduce-better-ways-to-locate-udevadm.patch
  * s390-tools-sles15sp2-mon_tools-update-udevadm-location.patch</changelog>
  <changelog author="ro@suse.de" date="1600171200">- use libexecdir for net-snmp agent config</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1603800000">- Upgraded to version 2.15.0 (jsc#SLE-13662, jsc#SLE-13663,
  jsc#SLE-13667, jsc#SLE-13724, jsc#SLE-13728, jsc#SLE-13730,
  jsc#SLE-13739, jsc#SLE-13744, jsc#SLE-13751, jsc#SLE-13755,
  jsc#SLE-13765, jsc#SLE-13768, jsc#SLE-13777, jsc#SLE-13814,
  jsc#SLE-13819, jsc#SLE-13820)
- Reworked s390-tools-sles12-sysconfig-compatible-dumpconf.patch to fit the
  current version and renamed it to s390-tools-sles15-sysconfig-compatible-dumpconf.patch
- Removed the following obsolete patches:
  * s390-tools-sles15sp2-01-zkey-Separate-and-rework-CCA-host-library-loading.patch
  * s390-tools-sles15sp2-02-zkey-Move-utility-functions-into-separate-source-fil.patch
  * s390-tools-sles15sp2-03-zkey-Add-utility-function-to-get-the-serial-number-o.patch
  * s390-tools-sles15sp2-04-zkey-Add-utility-function-to-get-the-mkvp-of-a-crypt.patch
  * s390-tools-sles15sp2-05-zkey-add-function-to-iterate-over-all-available-CCA-.patch
  * s390-tools-sles15sp2-06-zkey-Add-function-to-print-the-MKVPs-of-APQNs.patch
  * s390-tools-sles15sp2-07-zkey-Add-function-to-cross-check-APQNs-for-valid-mas.patch
  * s390-tools-sles15sp2-08-zkey-Add-function-to-obtain-the-mkvp-of-a-secure-key.patch
  * s390-tools-sles15sp2-09-zkey-Display-MKVP-when-validating-a-secure-key.patch
  * s390-tools-sles15sp2-10-zkey-Cross-check-APQNs-when-generating-secure-keys.patch
  * s390-tools-sles15sp2-11-zkey-Cross-check-APQNs-when-validating-secure-keys.patch
  * s390-tools-sles15sp2-12-zkey-Cross-check-APQNs-when-importing-secure-keys.patch
  * s390-tools-sles15sp2-13-zkey-Cross-check-APQNs-when-changing-APQN-associatio.patch
  * s390-tools-sles15sp2-14-zkey-Add-function-to-select-a-specific-CCA-adapter.patch
  * s390-tools-sles15sp2-15-zkey-Add-function-to-select-a-CCA-adapter-by-mkvp.patch
  * s390-tools-sles15sp2-16-zkey-Select-CCA-adapter-when-re-enciphering.patch
  * s390-tools-sles15sp2-17-zkey-cryptsetup-Add-to-new-and-from-old-options.patch
  * s390-tools-sles15sp2-18-zkey-Display-key-type-with-list-and-validate-command.patch
  * s390-tools-sles15sp2-19-zkey-Allow-to-filter-list-output-by-key-type.patch
  * s390-tools-sles15sp2-20-zkey-Allow-to-specify-the-key-type-with-the-generate.patch
  * s390-tools-sles15sp2-21-zkey-Preparations-for-introducing-a-new-key-type.patch
  * s390-tools-sles15sp2-22-zkey-Introduce-the-CCA-AESCIPHER-key-type.patch
  * s390-tools-sles15sp2-23-zkey-Add-wrappers-for-the-new-IOCTLs-with-fallback-t.patch
  * s390-tools-sles15sp2-24-zkey-Add-helper-functions-to-build-lists-of-APQNs.patch
  * s390-tools-sles15sp2-25-zkey-Add-support-for-generating-AES-CIPHER-keys.patch
  * s390-tools-sles15sp2-26-zkey-Add-support-for-validating-AES-CIPHER-keys.patch
  * s390-tools-sles15sp2-27-zkey-Add-support-for-re-enciphering-AES-CIPHER-keys.patch
  * s390-tools-sles15sp2-28-zkey-Check-crypto-card-level-during-APQN-cross-check.patch
  * s390-tools-sles15sp2-29-zkey-Add-helper-function-to-query-the-CCA-firmware-v.patch
  * s390-tools-sles15sp2-30-zkey-Add-helper-function-to-convert-secure-keys-betw.patch
  * s390-tools-sles15sp2-31-zkey-Add-helper-function-to-restrict-export-of-secur.patch
  * s390-tools-sles15sp2-32-zkey-Add-helper-function-to-check-an-AES-CIPHER-key.patch
  * s390-tools-sles15sp2-33-zkey-Add-key-checks-when-importing-a-CCA-AESCIPHER-k.patch
  * s390-tools-sles15sp2-34-zkey-Add-convert-command-to-convert-keys-from-one-ty.patch
  * s390-tools-sles15sp2-35-zkey-Allow-zkey-cryptsetup-setkey-to-set-different-k.patch
  * s390-tools-sles15sp2-zcrypt-CEX7S-exploitation-support.patch
  * s390-tools-sles15sp2-zcryptstats-Add-support-for-CEX7.patch
  * s390-tools-sles15sp2-zkey-Fix-listing-of-keys-on-file-systems-reporting-D.patch
  * s390-tools-sles15sp2-zkey-Fix-display-of-clear-key-size-for-XTS-keys.patch
  * s390-tools-sles15sp2-zkey-Fix-display-of-XTS-attribute-for-validate-comma.patch
  * s390-tools-sles15sp2-zkey-Fix-display-of-clear-key-size-for-CCA-AESCIPHER.patch
  * s390-tools-sles15sp2-01-zipl-libc-Introduce-vsnprintf.patch
  * s390-tools-sles15sp2-02-zipl-libc-Fix-potential-buffer-overflow-in-printf.patch
  * s390-tools-sles15sp2-03-zipl-libc-Replace-sprintf-with-snprintf.patch
  * s390-tools-sles15sp2-04-zipl-libc-Indicate-truncated-lines-in-printf-with.patch
  * s390-tools-sles15sp2-01-zpcictl-Initiate-recover-after-reset.patch
  * s390-tools-sles15sp2-02-zpcictl-Rename-misleading-sysfs_write_data.patch
  * s390-tools-sles15sp2-03-zpcitctl-Exit-on-error-in-sysfs_report_error.patch
  * s390-tools-sles15sp2-01-zipl-fix-Wdiscarded-qualifiers.patch
  * s390-tools-sles15sp2-02-zipl-fix-Waddress-of-packed-member.patch
  * s390-tools-sles15sp2-03-zipl-remove-some-useless-__packed___-attributes.patch
  * s390-tools-sles15sp2-04-zipl-Fix-entry-point-for-stand-alone-kdump.patch
  * s390-tools-sles15sp2-05-zipl-Fix-dependency-generation-in-zipl-boot.patch
  * s390-tools-sles15sp2-06-zipl-Make-use-of-__packed-macro.patch
  * s390-tools-sles15sp2-07-zipl-define-__section-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-08-zipl-Make-use-of-__noreturn-macro.patch
  * s390-tools-sles15sp2-09-zipl-Define-__noinline-macro-and-make-use-of-it.patch
  * s390-tools-sles15sp2-10-zipl-stage3-Mark-start_kernel-__noreturn.patch
  * s390-tools-sles15sp2-11-zipl-sclp-Remove-duplicate-macros.patch
  * s390-tools-sles15sp2-12-zipl-Make-address-size-mask-macros-UL.patch
  * s390-tools-sles15sp2-13-zipl-libc-Use-stdint.h-instead-of-self-defined-macro.patch
  * s390-tools-sles15sp2-14-zipl-Consolidate-IMAGE-macros.patch
  * s390-tools-sles15sp2-15-zipl-Consolidate-STAGE-2-3-macros.patch
  * s390-tools-sles15sp2-16-zipl-stfle-use-uint64_t-instead-of-u64.patch
  * s390-tools-sles15sp2-17-zipl-boot-fix-comment-in-stage3.lds.patch
  * s390-tools-sles15sp2-18-lib-zt_common-add-STATIC_ASSERT-macro.patch
  * s390-tools-sles15sp2-19-zipl-use-STATIC_ASSERT-macro-for-no-padding-verifica.patch
  * s390-tools-sles15sp2-20-Support-lib-zt_common.h-to-be-used-in-assembler-and-.patch
  * s390-tools-sles15sp2-21-zipl-move-IPL-related-definitions-into-separate-head.patch
  * s390-tools-sles15sp2-22-zipl-move-SIGP-related-functions-and-definitions-int.patch
  * s390-tools-sles15sp2-23-zipl-add-SIGP_SET_ARCHITECTURE-to-sigp.h-and-use-it.patch
  * s390-tools-sles15sp2-24-zipl-stage3-make-IPL_DEVICE-definition-consistent-wi.patch
  * s390-tools-sles15sp2-25-zipl-move-Linux-layout-definitions-into-separate-hea.patch
  * s390-tools-sles15sp2-26-zipl-tape0-use-constants-defined-in-linux_layout.h.patch
  * s390-tools-sles15sp2-27-zipl-use-STAGE3_ENTRY-for-STAGE3_LOAD_ADDRESS.patch
  * s390-tools-sles15sp2-28-zipl-move-loaders-layout-definitions-into-separate-h.patch
  * s390-tools-sles15sp2-29-zipl-s390.h-rename-inline-macro-into-__always_inline.patch
  * s390-tools-sles15sp2-30-zipl-move-__always_inline-barrier-__pa32-pa-to-zt_co.patch
  * s390-tools-sles15sp2-31-zipl-make-BLK_PWRT-unsigned-int.patch
  * s390-tools-sles15sp2-32-Consolidate-MIN-and-MAX-macros.patch
  * s390-tools-sles15sp2-33-zipl-remove-libc.h-include-in-s390.h.patch
  * s390-tools-sles15sp2-34-zipl-move-s390.h-to-include-boot-s390.h.patch
  * s390-tools-sles15sp2-35-zipl-libc-include-s390.h.patch
  * s390-tools-sles15sp2-36-include-boot-s390.h-move-panic-and-panic_notify-to-l.patch
  * s390-tools-sles15sp2-37-include-boot-s390.h-fixes-for-Werror-sign-conversion.patch
  * s390-tools-sles15sp2-38-zipl-refactor-all-EBCDIC-code-into-separate-files.patch
  * s390-tools-sles15sp2-39-zipl-sclp-add-macros-for-the-control-program-masks.patch
  * s390-tools-sles15sp2-40-zipl-sclp-add-sclp_print_ascii.patch
  * s390-tools-sles15sp2-41-zipl-libc-printf-print-on-linemode-and-ASCII-console.patch
  * s390-tools-sles15sp2-42-Consolidate-ALIGN-__ALIGN_MASK-ARRAY_SIZE-macros.patch
  * s390-tools-sles15sp2-43-genprotimg-boot-initial-bootloader-support.patch
  * s390-tools-sles15sp2-44-genprotimg-boot-use-C-pre-processor-for-linker-scrip.patch
  * s390-tools-sles15sp2-45-genprotimg-add-relocator-for-stage3b.patch
  * s390-tools-sles15sp2-46-README.md-remove-useless-empty-line.patch
  * s390-tools-sles15sp2-47-include-boot-s390.h-add-guard-for-struct-__vector128.patch
  * s390-tools-sles15sp2-48-genprotimg-introduce-new-tool-for-the-creation-of-PV.patch
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
  * s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  * s390-tools-sles15sp2-vmcp-exit-code.patch
  * s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  * s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  * s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
  * s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  * s390-tools-sles15sp2-lsluns-try-harder-to-find-udevadm.patch
  * s390-tools-sles15sp2-znetconf-introduce-better-ways-to-locate-udevadm.patch
  * s390-tools-sles15sp2-mon_tools-update-udevadm-location.patch
  * s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch
  * s390-tools-sles15sp1-zdev-Also-include-the-ctc-driver-in-the-initrd.patch not in spec file
  * s390-tools-sles15sp2-Close-file-descriptor-when-checking-for-read-only.patch not in spec file</changelog>
  <changelog author="mpost@suse.com" date="1607342400">- Upgraded to version 2.15.1. (bsc#1178250, jsc#SLE-13663)
- Added s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  (bsc#1178313). When specifying an incorrect program option, dasdfmt segfaults
  as the format string for the corresponding error message has no parameter.
- Added s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  (bsc#1178315). The fdasd command was failing if sysfs was mounted this way:
  mount -t sysfs none /sys
  To make sure that the mount point of the sysfs is still found when mounted
  with a device keyword specified other than 'sysfs', check for the filesystem
  type instead, which is more specific.
- Added the following patches for bsc#1178427, and jsc#SLE-13768,
  Log DASD info for endpoint security
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
- Added the following patch for bsc#1178628 and jsc#SLE-13765, Converged
  HiperSockets/Ethernet Interface
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
- Added the following patches for bsc#1178992 and jsc#SLE-13772, Add host-key
  document verification support to genprotimg.
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
- Added the following patch for bsc#1178734. Running zcryptstats when many domains
  are available per cryto card does not produce any output, and is hanging in a loop.
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
- Reworked and renamed the following patches to accommodate changes made by IBM
  to the structure of the dasdfmt command.
  * s390-tools-sles15-Allow-multiple-device-arguments.patch renamed to
    s390-tools-sles15sp3-Allow-multiple-device-arguments.patch.
  * s390-tools-sles15-Format-devices-in-parallel.patch renamed to
    s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch renamed to
    s390-tools-sles15sp3-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch renamed to
    s390-tools-sles15sp3-Implement-f-for-backwards-compability.patch renamed to
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1611835200">- Moved %dir %{_libdir}/zkey and %{_libdir}/zkey/zkey-ekmfweb.so
  from the libekfmweb1 package to the main package since it is a
  plugin for the zkey command, and not a shared library.
  (bsc#1180534)</changelog>
  <changelog author="mpost@suse.com" date="1613563200">- Added s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  (bsc#1182113)
  Problem:  The KMS configuration property names to store the CCA and
    EP11 APQNs are incorrect, i.e. swapped.
  Solution: Correct the KMS configuration property names.</changelog>
  <changelog author="mpost@suse.com" date="1614427200">- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Made for the following changes for bsc#1182816:
  * Updated s390-tools-sles15sp3-Format-devices-in-parallel.patch to
    change all instances of the progress bar from printing "#" to
    printing the process number of the DASD volume being formatted.
  * Updated s390-tools-sles15sp3-Implement-Y-yast_mode.patch to print
    out the numbder of cylinders in a device, as was done in the
    prior versions of this patch, but was missed when modifying it
    for SLES15 SP3.
  * Added s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
    because otherwise a warning message from dasdfmt is being generated
    that could interfere with YaST properly processing the progress
    of the formatting process.</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch (bsc#1183039)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Added s390-tools-sles15sp3-remove-no-pie-link-arguments.patch so
  that we can build on systems with binutils 2.36 and higher. Without
  this, the build fails because that version of the ld command
  doesn't recognize "-no-pie" an acceptable argument.
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
</package>
<package pkgid="86efea72854eac9876d4c37fc45b5c8544f69b6ddf88910229669dd997637e67" name="libfltk1" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="bbccd4520897dc5691eab44555260046049f142825f56aa4eacf70cdf7772810" name="libfltk1" arch="ppc64le">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="4381e2da62ca04d339cdc36de181f563c2387324d5b3d74d027aef0b2c3094f0" name="libfltk1" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="a3bec86f20541ea9351aa19ed01f7e708b3afb796db39b97bd119b6665e5e061" name="libfltk1" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="116aac489e0571e5ec6d5dda2ffd19de61ff726ce6f3c9d3c1c340fee9dbceda" name="libfltk1-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="e3f2eedb2c77d4fa77b09e8ad1503aa542f30aba99c4cfa4dbb60854e7c287be" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="82cd9a5b365e035973a28318ff6aec894b69ca6deea2b6f0c059e91a3fc28c9c" name="libfreebl3" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b8d0234d75e53a87e6ac0b356dd6cefb6afff77850d84dfd83a534bb405c516a" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d94702976f5b9365a013bf6bcb221ff4565f8e4579a0a5208cd5d4a6138d13ea" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="340ca067124aae14d0ab1cbc62995f67a478396d2a4e7081fe85f0cdc9574eef" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="eb7ae983fdc63fae80f57687f446fd26432665ed739b16b3524d735830471420" name="libfreebl3-hmac" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="dc3bee48ad8759c22706a66445a552b67cca5a9e8490829b47b9983493027baa" name="libfreebl3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9a6e1692b1b09593e90581592c35dd2617681591b9c1677e47f07c16df59df85" name="libfreebl3-hmac" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="01521e6112d54822c8e5af02eb0e4bb334b9a14502b82c77764e356b4b622c52" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5f2d62255474fca2e5e2bd3ed016b23583cd7838d0b3bb0d372dc32aa73076b2" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="df053e713063e1328b9574c0f5cb2935d93bfb06b777d715a9d2982510094d7e" name="libfreshclam2" arch="aarch64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="b38bc4c066a2f51e5ed22ec4fc83afda2ab3d6a5619e086619a50bbfdffbab34" name="libfreshclam2" arch="ppc64le">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="c12e662cc098345c84e207de105763bdc0278c4e34eff1762b67f1fe041c89e9" name="libfreshclam2" arch="s390x">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="eb1232681824fda5bcda55d257fe8e0e7f6edca732c92e1e0ed9dfbe81a6e0e2" name="libfreshclam2" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="3.29.1"/>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="max@suse.com" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="max@suse.com" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="egdfree@opensuse.org" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
</package>
<package pkgid="53d06ef44ced2c1c26f030997e864af670f63fddc38095f2f48f0d9506b976b8" name="libfribidi0" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="5f9bd58fc2801d5b0abb7a3eee1537febd4b3bbe7081233b52790d368a399cc7" name="libfribidi0" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="1dfa129c1abe9d5dff8177ef440741cc141f7c44baf7b3c75a6a4ff52191e44c" name="libfribidi0" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="abb44bcc438f43916420b26b6e77d258856f81c710df852f1c4c7eb82579d112" name="libfribidi0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="8626d15b0b868af7115c7e68b0184ad834cff15bcd93619912642c0570202566" name="libfribidi0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="e39a25eb61a1f39576f08fe5b9cbea2f79b94ccfa51b0c464d273f221f68899a" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="70ca65b22f7caae2587900569bdf22a495d17accada4256c717f39213d832595" name="libgcc_s1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="25570ced807419610d7cd53eee5bcdc4a9ca8ea66f978debc90f1abb19bc66b3" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8cde98a85cd6cf345f4634fbb519dbe80447257a9739ee76c7c9370016fd507a" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d63af47ecda79656684e03639ef4fe1fd8af64509ce094dd26d6540bcb142637" name="libgcc_s1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d19587a84203593292abb6e69cffc1f01b2a204dcd31d8460730cb6d60ffdc11" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6b54b5e19023df4600b5a39bd72b5d2b067c78c0a7f4dee52a3204f75dc50c5d" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="c2a2fa798c4fb714e1810dd1e51732f983283d5602c052a0b36aa070f2ae4903" name="libgcrypt-cavs" arch="aarch64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="3bf74cd4b3a2db52d7e159dfd9bfdde02a1371b805787ac505bf8cbcfaa9cad7" name="libgcrypt-cavs" arch="ppc64le">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="d85f39aa633e428a444fa07dd79c67fb9207f57152ebc2a6ed8d3239b4d90d32" name="libgcrypt-cavs" arch="s390x">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="6ad5ad219a9949837795c56c12f7af1eaef076181aff3211266198511739356e" name="libgcrypt-cavs" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="a81c0f047e57161bea7a377d1c5d4089cfe2740799b48a8ad7cd8b19a1b0f379" name="libgcrypt-devel" arch="aarch64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="156030cd4b43be1e1985404e65b6b304d343370a669aa16b259fc39cc2d35971" name="libgcrypt-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="cc30b13d23f896bdc19d9e4a06902a72fe45db1b5b4fc91fe330fa170dffd312" name="libgcrypt-devel" arch="s390x">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="3f7a5a33064909a54d249689af268ea721a2de5c96ecc58a821983d507ecdfda" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="58fba1272271276d93fb1c25808f0ac1529dbe2f09ef3bff7ca5af04fea3e51b" name="libgcrypt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="1bab79f025d9877538f885def97bf022c7787f15dd3f0081b15ee99f2b432e9d" name="libgcrypt20" arch="aarch64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="9b7dee9384dfbf4e0531a18ea51207b84410d5f0e13f9370f2164d84bfa27538" name="libgcrypt20" arch="ppc64le">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="2737829b4d1c470fbd7a2689c77530d4eca4fa2f3ec23fa584d38d3a50e6aa9e" name="libgcrypt20" arch="s390x">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="31000f7eb00424627636454c9d5776930bf12e96d1fbccecfba0771f91529fee" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="f64dfa07e1e7729bfc52cf3e57e4f69e810f65710c8f6f87f322a1b7b6f84296" name="libgcrypt20-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="a8c2da4ae7145352bc7a867bc103b25f304eb92a276ba2df2fb274ee944dcd21" name="libgcrypt20-hmac" arch="aarch64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="2b75964f5d8f2f05ae53b836509ff1475cd8b4fc3384651364d939b54927c7d7" name="libgcrypt20-hmac" arch="ppc64le">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="a8485dc5f9d176d98e6eb6d8c4663a7a3062775e9c27de9b139d136113fdd0d1" name="libgcrypt20-hmac" arch="s390x">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="b2d549fad38d283b15f24b43e274fc2fb81985029baad4886b9b8524c6d34b57" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="dd3a299b2ad8717bf92627bdbc13452adf9f0981095e9484a94199f82e3213e6" name="libgcrypt20-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.39.1"/>
  <changelog author="jsikes@suse.de" date="1563451200">- Fixed a race condition in initialization.
  * Added libgcrypt-1.8.4-allow_FSM_same_state.patch
- Security fix: [bsc#1138939, CVE-2019-12904]
  * The C implementation of AES is vulnerable to a flush-and-reload
    side-channel attack because physical addresses are available to
    other processes. (The C implementation is used on platforms where
    an assembly-language implementation is unavailable.)
  * Added patches:
  - libgcrypt-CVE-2019-12904-GCM-Prefetch.patch
  - libgcrypt-CVE-2019-12904-GCM.patch
  - libgcrypt-CVE-2019-12904-AES.patch
- Fixed env-script-interpreter in cavs_driver.pl</changelog>
  <changelog author="jsikes@suse.com" date="1564574400">- Fixed an issue created by incomplete implementation of previous change - [bsc#1097073]
  * Removed section of libgcrypt-binary_integrity_in_non-FIPS.patch
    that caused some tests to be executed more than once.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567425600">- Security fix: [bsc#1148987,CVE-2019-13627]
  * Mitigation against an ECDSA timing attack
  * Added libgcrypt-CVE-2019-13627.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573560000">- CMAC AES and TDES FIPS self-tests:
  * CMAC AES self test missing [bsc#1155339]
  * CMAC TDES self test missing [bsc#1155338]
- Add libgcrypt-CMAC-AES-TDES-selftest.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574769600">- Fix test dsa-rfc6979 in FIPS mode:
  * Disable tests in elliptic curves with 192 bits which are not
    recommended in FIPS mode
  * Add patch libgcrypt-dsa-rfc6979-test-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574856000">- Fix tests in FIPS mode:
  * Fix tests: basic benchmark bench-slope pubkey t-cv25519 t-secmem
  * Add patch libgcrypt-fix-tests-fipsmode.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576065600">- FIPS: RSA/DSA/ECDSA are missing hashing operation [bsc#1155337]
  * Add libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262400">- FIPS: keywrap gives incorrect results [bsc#1161218]
  * Add libgcrypt-AES-KW-fix-in-place-encryption.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1579262401">- FIPS: libgcrypt DSA PQG parameter generation: Missing value [bsc#1161219]
- FIPS: libgcrypt DSA PQG verification incorrect results [bsc#1161215]
- FIPS: libgcrypt RSA siggen/keygen: 4k not supported [bsc#1161220]
  * Add patch from Fedora libgcrypt-1.8.4-fips-keygen.patch</changelog>
  <changelog author="vcizek@suse.com" date="1579521600">- ECDSA: Check range of coordinates (bsc#1161216)
  * add libgcrypt-ECDSA_check_coordinates_range.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582632000">- FIPS: Run the self-tests from the constructor [bsc#1164950]
  * Add libgcrypt-invoke-global_init-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
</package>
<package pkgid="81987076f5e655c296d52b4435fdbc5e1febad8b2293d9a5a6f0353783728e04" name="libgdruntime1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e681510a77d040240e259152a33f09f4a048e9f1328014a8283e5ce1151bbf41" name="libgdruntime1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="50445a5dc01c954550b8d37a10c601506a4d803c14da9d39ab5cee5ae1f6253c" name="libgdruntime1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9960e76a40583a0892d9735a78fedd703e546978382e967dfa6bea6ed558756a" name="libgdruntime1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f3623d40c7e8cdfa26022f85c63bed428ea7817f3da69f352366e7033e2608d1" name="libgdruntime1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="09f1b69d68381ca51b7f8bb1ebb90e52bf0abaaf620e184d0a000947f69cf748" name="libgfortran5" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c7cc423fe1fcf82f6942e1902a01bfe43157a47dd088d6fea6bb38891f7f0eab" name="libgfortran5" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8fe2fb6c85a6d2d73c306bd84d55537db4e12a24543b2d23a6517d133509a9f9" name="libgfortran5" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2bebc9836a0f318336d5f36accbedb9361907e2abea6c3d732389444331bc0ad" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cfae885bd3bbffa774130b327829d8ce6a98eb9c666ea6fa0735c9c5a640a8ee" name="libgfortran5-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1ad59168d7dc892c58d7a2897fbc98774d4d067dde2e39111ad85340fb1a346b" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b4074acc615aaba3751ecc1cc4d38eb0c261f539e7748839c75f55119f9bf2a3" name="libgnome-bluetooth13" arch="aarch64">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="90aced7fa6c23dd382cf9e1cf1e08cfc1d49badc1b0f2b8b37b16a0000bf1a4c" name="libgnome-bluetooth13" arch="ppc64le">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="1a225e489eadec7b1b4d7976d2b3f476f1dfe8525adc95329ae3c718a4c7d6d1" name="libgnome-bluetooth13" arch="s390x">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="98e145400cb1f2eb7cf61d9fb9ead9e221b085ad15d6a8e2a2f65ffde17deecb" name="libgnome-bluetooth13" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="4.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1518696000">- Update to version 3.27.90:
  + Simplify and make BluetoothClient more efficient.
  + Fix problems when Bluetooth adapters come and go.
  + Remove quirks already handled by autopair plugin.
- Update Url tag to https://wiki.gnome.org/Projects/GnomeBluetooth,
  current GNOME Bluetooth's web page.
- Rename enable-gtk-doc meson option to gtk_doc following upstream
  change.
- Add LGPL-2.1+ to the License tag for compliance with the
  libraries' copyrights.
- Update summaries and descriptions to express more accurately each
  subpackage's content.
- Drop update-desktop-files BuildRequires and its macro: it is no
  longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 3.27.92:
  + Avoid crash when Bluetooth panel is switched away from quickly.
  + Fix connection button state becoming out of sync after
    disconnect.
  + Make sure to remove all the devices when bluetoothd crashes.
  + Stop spinner when it becomes invisible.
  + Fix compile-time warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="jengelh@inai.de" date="1520942400">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 3.28.1:
  + Work-around a race in bluetoothd which would leave Bluetooth
    adapters discoverable even after the Settings panel closed
    cleanly.
  + Fix icons in Persian and Punjabi translations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532347200">- Help translation-update-upstream finding the right gettext domain
  name: pass "po gnome-bluetooth2" to the call.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533124800">- Update to version 3.28.2:
  + Use feature of BlueZ 5.51 to avoid Bluetooth adapters being
    left discoverable if the Settings panel exits suddenly.
  + Build warning fixes.
- Add pkgconfig(gio-unix-2.0), pkgconfig(gmodule-2.0) and
  pkgconfig(libnotify) BuildRequires and drop pkgconfig(udev)
  BuildRequires, align with what meson checks for.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546171200">- Add gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: lib: Add
  another oui for "Microsoft Sculpt Comfort Mouse".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 3.31.1:
  + Accessibility fixes and support for narrow displays in the
    Settings panel widget.
  + Add support for another "Microsoft Sculpt Comfort Mouse".
  + Build improvements.
- Drop gnome-bluetooth-Add-Sculpt-Comfort-Mouse.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 3.32.0:
  + Add quirk for Evoluent VerticalMouse 4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553601600">- Update to version 3.32.1:
  + Fix setup of devices that don't need pairing.
  + Always try to pair pointer devices.
  + Delegate audio devices quirks to bluez, which means that more
    PIN codes can be tried without user intervention.
  + Disable discovery when switching settings.
  + Fix possible warnings when switching settings.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 3.33.90:
  + Describe "Reveal" as "Open Containing Folder".
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567771200">- Update to version 3.34.0:
  + Fix possible use-after-free when using some gnome-shell
    extensions.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1583928000">- Update to version 3.34.1:
  + Prefer ?Alias? adapter name to ?Name?.
  + Fix some memory leaks.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1600862400">- Update to version 3.34.2:
  + Work-around intermittent connection problems by disabling
    discovery when connecting to devices.
  + Hide pairing dialogue when pairing fails.
  + Allow $HOME to be the Downloads dir.
  + Better handling of the 8bitdo Zero gamepad.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1601812800">- Update to version 3.34.3:
  + Fix problem with intermittent connection work-around when using
    the switch in the device properties.
  + Updated translations.</changelog>
  <changelog author="yu.daike@suse.com" date="1621857600">- Update to version 3.34.5 (bsc#1186277):
  + Fix unwanted soname change.
  + Note that an unreleased version of python-dbusmock is required
    to run the test suite added in 3.34.4, disable tests if this
    dependency is unavailable.
- Update to version 3.34.4:
  + Use device alias instead of device name in Settings UI, and
    don't show devices without a name.
  + Avoid new devices jumping around in the Settings list.
  + Fix a warning and a hang when opening the Bluetooth Settings.
  + Fix a possible hang when switching away from the Bluetooth Settings.
  + Make the "Cancel" button work when pairing keyboards.
  + Remove joypad quirks in favour of BlueZ autopair ones.
  + Remove a number of deprecated calls.</changelog>
</package>
<package pkgid="fdcff24ec7c4ee652b3dffae44aa157d3b9ba4573e00f0f2b5beb1ad2a54d7b6" name="libgnomekbd" arch="aarch64">
  <version epoch="0" ver="3.26.0" rel="3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 3.4.0.2:
  + Really fix issues introduced in 3.4.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1339329600">- Update to version 3.5.2:
  + Removed xmodmap support, would be handled in g-s-d through the
    scripts.
  + Some minor build fixes.
- Rebase libgnomekbd-default-group-switch.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1345896000">- Update to version 3.5.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Draw keys with invalid keycodes.
  + Fix modifier key pressed state.
  + Build system and minor code cleanups.
  + Avoid crashes on wayland sessions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0.1:
  + Fix non-installed gschemas.
- Changes from version 3.22.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Fix icon filename in Portuguese and Serbian translations.
  + Fix untranslated app name on the panel.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1617364800">- Add libgnomekbd-avoid-coredump-on-ibus-engines.patch: avoid libgnomekbd
  crash when working with ibus(bnc#1160963, glgo#GNOME/libgnomekbd!6).</changelog>
  <changelog author="qzhao@suse.com" date="1621857600">- Add libgnomekbd-set-default-indicator.patch: set the common
  keyboard layout indicator as "default" to avoid misleading
  (bnc#1034390).</changelog>
  <changelog author="qzhao@suse.com" date="1622548800">- Add libgnomekbd_avoid_implicit_definition.patch: Add string.h into
  include files to avoid inplicit definition warning in building.
  This change is to meet the needs of the inspection of maintaince
  build checking script(bnc#1160963, bnc#1034390,
  glgo#GNOME/libgnomekbd!7)</changelog>
</package>
<package pkgid="df2d4440b9129c4745c7931edbb6ae0ee638dddf251e98bd7ee5cd6fd84a8788" name="libgnomekbd" arch="ppc64le">
  <version epoch="0" ver="3.26.0" rel="3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 3.4.0.2:
  + Really fix issues introduced in 3.4.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1339329600">- Update to version 3.5.2:
  + Removed xmodmap support, would be handled in g-s-d through the
    scripts.
  + Some minor build fixes.
- Rebase libgnomekbd-default-group-switch.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1345896000">- Update to version 3.5.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Draw keys with invalid keycodes.
  + Fix modifier key pressed state.
  + Build system and minor code cleanups.
  + Avoid crashes on wayland sessions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0.1:
  + Fix non-installed gschemas.
- Changes from version 3.22.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Fix icon filename in Portuguese and Serbian translations.
  + Fix untranslated app name on the panel.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1617364800">- Add libgnomekbd-avoid-coredump-on-ibus-engines.patch: avoid libgnomekbd
  crash when working with ibus(bnc#1160963, glgo#GNOME/libgnomekbd!6).</changelog>
  <changelog author="qzhao@suse.com" date="1621857600">- Add libgnomekbd-set-default-indicator.patch: set the common
  keyboard layout indicator as "default" to avoid misleading
  (bnc#1034390).</changelog>
  <changelog author="qzhao@suse.com" date="1622548800">- Add libgnomekbd_avoid_implicit_definition.patch: Add string.h into
  include files to avoid inplicit definition warning in building.
  This change is to meet the needs of the inspection of maintaince
  build checking script(bnc#1160963, bnc#1034390,
  glgo#GNOME/libgnomekbd!7)</changelog>
</package>
<package pkgid="b9cc4b25dfa06e2c776e4c93ee3d3c2356e66a6ce48b2033f82a15dc839ad235" name="libgnomekbd" arch="s390x">
  <version epoch="0" ver="3.26.0" rel="3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 3.4.0.2:
  + Really fix issues introduced in 3.4.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1339329600">- Update to version 3.5.2:
  + Removed xmodmap support, would be handled in g-s-d through the
    scripts.
  + Some minor build fixes.
- Rebase libgnomekbd-default-group-switch.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1345896000">- Update to version 3.5.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Draw keys with invalid keycodes.
  + Fix modifier key pressed state.
  + Build system and minor code cleanups.
  + Avoid crashes on wayland sessions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0.1:
  + Fix non-installed gschemas.
- Changes from version 3.22.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Fix icon filename in Portuguese and Serbian translations.
  + Fix untranslated app name on the panel.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1617364800">- Add libgnomekbd-avoid-coredump-on-ibus-engines.patch: avoid libgnomekbd
  crash when working with ibus(bnc#1160963, glgo#GNOME/libgnomekbd!6).</changelog>
  <changelog author="qzhao@suse.com" date="1621857600">- Add libgnomekbd-set-default-indicator.patch: set the common
  keyboard layout indicator as "default" to avoid misleading
  (bnc#1034390).</changelog>
  <changelog author="qzhao@suse.com" date="1622548800">- Add libgnomekbd_avoid_implicit_definition.patch: Add string.h into
  include files to avoid inplicit definition warning in building.
  This change is to meet the needs of the inspection of maintaince
  build checking script(bnc#1160963, bnc#1034390,
  glgo#GNOME/libgnomekbd!7)</changelog>
</package>
<package pkgid="820fe2b597152c1e3dbeddc4a296ddf0d10a5aefd74c1ea320befd686f7acf7a" name="libgnomekbd" arch="src">
  <version epoch="0" ver="3.26.0" rel="3.3.1"/>
  <changelog author="fcrozat@novell.com" date="1299585600">- Update to version 2.91.91:
  + More improvements in the drawing widget.
  + Small build/runtime fixes
  + Updated translations.</changelog>
  <changelog author="fcrozat@novell.com" date="1302004800">- Update to version 3.0.0:
  + Updated translations
- Changes from version 2.91.92:
  + Minor fixes</changelog>
  <changelog author="fcrozat@novell.com" date="1302091200">- Update to version 3.0.0.1:
  + Fix color of status indicator in fallback mode.
  + Fix initial size of status indicator.</changelog>
  <changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 3.1.90:
  + Couple of minor bugs fixed.
  + Updated translations.</changelog>
  <changelog author="vuntz@opensuse.org" date="1314878400">- Drop explicit Requires from devel packages that will
  automatically be added the pkg-config way: dbus-1-glib-devel,
  gconf2-devel, gtk3-devel, libxklavier-devel.</changelog>
  <changelog author="vuntz@opensuse.org" date="1316692800">- Update to version 3.1.92:
  + Fix build issues.
  + Updated translations.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317211200">- Update to version 3.2.0:
  + Updated translations.</changelog>
  <changelog author="vuntz@opensuse.org" date="1329912000">- Update to version 3.3.90:
  + Some build fixes
  + Some deprecated APIs changed to the new ones
  + The introspection is now linked to libxklavier</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Update to version 3.4.0:
  + Dropping obsolete plugins architecture.
  + Small memory leak fixed.
  + Options comparison improved.</changelog>
  <changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 3.4.0.1:
  + Revert "Small memory leak fixed": it was a bad idea.
- Change update-desktop-files BuildRequires to desktop-file-utils:
  we don't need %suse_update_desktop_file anymore, but we need the
  %desktop_database_* macros.</changelog>
  <changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 3.4.0.2:
  + Really fix issues introduced in 3.4.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1339329600">- Update to version 3.5.2:
  + Removed xmodmap support, would be handled in g-s-d through the
    scripts.
  + Some minor build fixes.
- Rebase libgnomekbd-default-group-switch.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1345896000">- Update to version 3.5.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Draw keys with invalid keycodes.
  + Fix modifier key pressed state.
  + Build system and minor code cleanups.
  + Avoid crashes on wayland sessions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0.1:
  + Fix non-installed gschemas.
- Changes from version 3.22.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Fix icon filename in Portuguese and Serbian translations.
  + Fix untranslated app name on the panel.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1617364800">- Add libgnomekbd-avoid-coredump-on-ibus-engines.patch: avoid libgnomekbd
  crash when working with ibus(bnc#1160963, glgo#GNOME/libgnomekbd!6).</changelog>
  <changelog author="qzhao@suse.com" date="1621857600">- Add libgnomekbd-set-default-indicator.patch: set the common
  keyboard layout indicator as "default" to avoid misleading
  (bnc#1034390).</changelog>
  <changelog author="qzhao@suse.com" date="1622548800">- Add libgnomekbd_avoid_implicit_definition.patch: Add string.h into
  include files to avoid inplicit definition warning in building.
  This change is to meet the needs of the inspection of maintaince
  build checking script(bnc#1160963, bnc#1034390,
  glgo#GNOME/libgnomekbd!7)</changelog>
</package>
<package pkgid="1b26288cf00d50307f6ca57d46fd6abbd59e9c766f77c1d159fd7249ab67579d" name="libgnomekbd" arch="x86_64">
  <version epoch="0" ver="3.26.0" rel="3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 3.4.0.2:
  + Really fix issues introduced in 3.4.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1339329600">- Update to version 3.5.2:
  + Removed xmodmap support, would be handled in g-s-d through the
    scripts.
  + Some minor build fixes.
- Rebase libgnomekbd-default-group-switch.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1345896000">- Update to version 3.5.90:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Draw keys with invalid keycodes.
  + Fix modifier key pressed state.
  + Build system and minor code cleanups.
  + Avoid crashes on wayland sessions.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474372800">- Update to version 3.22.0.1:
  + Fix non-installed gschemas.
- Changes from version 3.22.0:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Fix icon filename in Portuguese and Serbian translations.
  + Fix untranslated app name on the panel.
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1617364800">- Add libgnomekbd-avoid-coredump-on-ibus-engines.patch: avoid libgnomekbd
  crash when working with ibus(bnc#1160963, glgo#GNOME/libgnomekbd!6).</changelog>
  <changelog author="qzhao@suse.com" date="1621857600">- Add libgnomekbd-set-default-indicator.patch: set the common
  keyboard layout indicator as "default" to avoid misleading
  (bnc#1034390).</changelog>
  <changelog author="qzhao@suse.com" date="1622548800">- Add libgnomekbd_avoid_implicit_definition.patch: Add string.h into
  include files to avoid inplicit definition warning in building.
  This change is to meet the needs of the inspection of maintaince
  build checking script(bnc#1160963, bnc#1034390,
  glgo#GNOME/libgnomekbd!7)</changelog>
</package>
<package pkgid="51ed63521c35d009d6ad12e7be55de984f9c8bcad72260cb74c8b99390e4a7b8" name="libgnomesu" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="fdb3e3ecf048a81781deb108ff8907447c50207f2bb5e1a6676bca55610c29a5" name="libgnomesu" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="b012d7d746700918f2b1ea20687db738ed2049932b04f3492124cdb5a3902bb3" name="libgnomesu" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="219a471e00ce53fb58b6422eb4d243681be50405c240fd710fbee3533aad4c32" name="libgnomesu" arch="src">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit BuildRequires to avoid implicit
  dependency from prjconf.</changelog>
  <changelog author="vuntz@opensuse.org" date="1330084800">- Add libgnomesu-suid_flags.patch: respect SUID_CFLAGS/SUID_LDFLAGS
  when building the suid binary gnomesu-pam-backend.
- Set SUID_CFLAGS to -fPIE and SUID_LDFLAGS to -pie in %build. This
  fixes bnc#743139.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1346932800">- Add a Supplements for gnome-session and xdg-utils, to ensure that
  gnomesu is automatically installed when the user installs GNOME.
  Until now, we were relying on the patterns.</changelog>
  <changelog author="dimstar@opensuse.org" date="1362657600">- Enhance libgnomesu-gtk3.patch: add #undef GTK_DISABLE_DEPRECATED
  in order to allow usage of deprecated symbols (e.g. GTK_TABLE).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="0d3363b164c74a47adc63025b1cfa68406b67af6a7b96ef1062073271dd4f8a7" name="libgnomesu" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="af6e5a4b158cfa106367c66e6dd25ce46a3cc8a7346825667b507cc1897bb3d9" name="libgnomesu-devel" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="f8c67ead921f4cf5cee4e34ca6fb5f3fd0a926dd96b35cedb1dade7b214ffee0" name="libgnomesu-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="b08d978ab0b371a1d7b36c0fdc6590a247cb1bd1d6f377d2f0625843efc02101" name="libgnomesu-devel" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="0d703e96473dbe8f569e3f386190e2af699ced52f25c14d190c4063d7138ac09" name="libgnomesu-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="dcb8502121114fd79e3a8169c4909e226a1872af4b355b7def7219de75ad8ce4" name="libgnomesu-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="afc6188de55946a77bdf0dad70bbaefe2c72f586db466942eae8636073af067a" name="libgnomesu0" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="a1de672564e4b5e831fb65750d375484f8c1427f553f8800308784f298bbce72" name="libgnomesu0" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="09bbfe4b9d215f65fbad97f497f8798749eb42e87c0ec920a174c7b331286d73" name="libgnomesu0" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="53b1ab60e4e7dd795c4ab2014cd69438d5a86b5590d2cf9ee5ee2cefcd360215" name="libgnomesu0" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- Use rm -f to avoid rm asking back with strict umasks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423224000">- Add libgnomesu-set-xdg_runtime_dir.patch: explicitly set
  XDG_RUNTIME_DIR for the new user (boo#908167).</changelog>
  <changelog author="sbrabec@suse.com" date="1441886400">- Update to version 2.0.0 maintained by openSUSE:
  * Obsolete all SUSE patches
    (libgnomesu-better-pam-handling.patch,
    libgnomesu-bnc440970-safe-path.patch
    libgnomesu-drop-libgnomeui.patch, libgnomesu-gtk3.patch
    libgnomesu-check-setuid-retval.patch,
    libgnomesu-ia64-crash.patch, libgnomesu-i18n.patch,
    libgnomesu-libtool.patch, libgnomesu-makefile.patch,
    libgnomesu-modernize.patch, libgnomesu-no-gconf.patch,
    libgnomesu-no-manual-memory-cleaning.patch,
    libgnomesu-remove-prior-cookie.patch,
    libgnomesu-reorder-pam-init.patch,
    libgnomesu-set-xdg_runtime_dir.patch,
    libgnomesu-startup-notification.patch
    libgnomesu-suid_flags.patch, libgnomesu-unsetenv.patch,
    libgnomesu-use-pam_xauth.patch,
    libgnomesu-1.0.0-spin-mainloop.patch,
    libgnomesu-1.0.0-xauth-nolookup.patch, libgnomesu-64bit.patch)
  * Include lost SLE11 fix from hpj@novell.com:
    Add patch to make child process exit if parent does. Part of
    bnc#578284.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1441886401">- Include lost SLE11 fix from hpj@novell.com:
  * Add libgnomesu-exit-with-parent.patch, to make child process
    exit if parent does. Part of bnc#578284.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572
- Drop libgnomesu-exit-with-parent.patch: now included in tarball.</changelog>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="f146da3615979161d6c2b4a4327bd000642d7758cafbb20deb930325bff8416a" name="libgnutls-devel" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="ef2d233df463752fa04be407c076706e0ca0dc9f35f27538b94b86967b1a1f94" name="libgnutls-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="44274727cecc5bdcc52c8b72bae87ae8c475f0ac7aae6ab545051450ba39a6d8" name="libgnutls-devel" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="20ae5b76d6417a1e53f3a7119b2fe7c1f53b627ffe69c578956a3be1cf741c32" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="091fdc897f7bc2190958a698bd70b3ec8e1ed72d893250034b203807030d070c" name="libgnutls-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="480d0af9272812de2ed055e4b273a4d0cc653c56959ecbabca8ce8f393d38d31" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="e7c4cb7003580402256c76a906b8a53f4d74a89a61edef7af993f4895773f560" name="libgnutls30" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="a06bc71f84bc9a4036ca4f938c4566f7c9aef23a3a11617868138b54cc6b8d99" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="9f78112bed0a12e3120fd974264d7aa8eb6271dd27f69cdf8f6d86ab0f5f2f67" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="bdc097e902fef419100d1fd1537a333b3632e1eb5cce34d4a0322cda1247514a" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="f8c4b02053ac61f93f48dff2540b5462342a21d4718c175bf5948bead9aa9cff" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="dc52c04b325f7d75d9b39e470eff3ac7b1f2a6fa00e16037d64cfbb8999e3524" name="libgnutls30-hmac" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="cf491eabd6cc04d1ffe3c2f53e23ad259cea75afaad1cc0df2409fc0b9da14d0" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="e62d6a53d7f4b51424513bbe056091b4dc80f3914053f38594d74a5e505d4c57" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="360c51d731afc127066ab1d67cc17f09ee7a27421c497dab7fa6241b269e4af3" name="libgnutls30-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="a4c18e3777689345de928e4e8f1f00c2f12075f7bca47089a200392f61728bf9" name="libgnutlsxx-devel" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="c749e374a79d620f770fe5eb9d9232694c3fa18d3f1d5e97b38c2d2c86d9642a" name="libgnutlsxx-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="c806c2e8967fd88af122979339dd6729b681a9f28410fc19bb9524eeb5393826" name="libgnutlsxx-devel" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="a9d521920e47be6c57e3e8c8f4478687306353e2ea607eb3c913f41ca9320b01" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="4883bf447316068167633fb7fc8ae3fa223e1a719d9bef866cc705deb7cd97e8" name="libgnutlsxx28" arch="aarch64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="5e1004c607a7ec2cd7f7536ae319cd2d9719f79bcff4684abee1246d287c35c1" name="libgnutlsxx28" arch="ppc64le">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="7ebc61aeb9049b857ae47525f41cd564ff68b2694ab75c28ad7cf164eed7da5b" name="libgnutlsxx28" arch="s390x">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="4626858f8b4c538afc37ee63ab28193ac9dd5bad64e088a0ddf6a667f7004a86" name="libgnutlsxx28" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.13.5"/>
  <changelog author="jsikes@suse.de" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="jsikes@suse.de" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="vcizek@suse.com" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="vcizek@suse.com" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="jsikes@suse.com" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="jsikes@suse.com" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="vcizek@suse.com" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="abergmann@suse.com" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
</package>
<package pkgid="02cedd1f8a67d1a5eddde458b69ccc78854dfc0f227fce04caa70f933df09c92" name="libgo16" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f9dfdf39e5087d3c698c4d5879278e227005566810884981f5c1bd1b79556d2e" name="libgo16" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af6114ac513f2b8e8fc9cbd4580a191051ac6202f639c5e268fd18ec2ba1e199" name="libgo16" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="066a20cd7c6a180a51228292acac6ea76c21b581ce3eefdf48df7f6ec5e2aa44" name="libgo16" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8ff50f33f63de8e21eacd8b57945966c3fb790605981cf1780eb61840a0f8ffc" name="libgo16-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a7d5ed08631f416391e187ebc4663b7358ab1472582fda0b7c81be863008217e" name="libgo16-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="98b05fb0457ab4c69a99e9971795837788d57ed7fd2edef1186571d732398b73" name="libgomp1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="78f17c1cb8b55f93e207fc7678daf5b4ee1f3608a57422d7ab715e9413471f36" name="libgomp1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="db5e1dc67f143c5916b58244081cb6c75545b6d817fe9addca006383952c3af9" name="libgomp1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3bcab0a76cacaf5b10843b7f80d86c7d19e0e329041c88d6d644bc0e7ad9c719" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7a7a05116bc817e98410b613abd65e76e1ab9a7c6e7ce922726d6edb3f64a4fe" name="libgomp1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6d97aa9d90f62f7f5bd098795795fe9c95515fe5b3922bd4662024339e6a7480" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1c49c14a51340241f2adcad92e44822216137c4e3e7dab89695622128160e787" name="libgphobos1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="292278aa3936d87f4464c6ee8003653f18a1292b0cc379a81feb07be37bb7329" name="libgphobos1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1ef21546221d3cffe21e8396d4802a7492e21d81da04b606392f76d680db9704" name="libgphobos1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cf109908df12a2bf71fd96dfb2aeedf6209ea64356e0adb29303c18687209464" name="libgphobos1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="682255547506945b25b13118e3f179a06ead75295abfc773c569187c36a9272f" name="libgphobos1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f0c1608d5325333008198b510218a96842e2067595857ac3db82f1268b25d7c0" name="libgpm2" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="4e36858a260d122a62ce4107aa1b83758cb205eed0af06b0200cee4ea58335d8" name="libgpm2" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="344cfecb4092eacfcb0e3dfdb7061b4d58da7352a2e51353596d30a838d0040b" name="libgpm2" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="03cd24c2674ab1808db270cd2c74dd059258f7a73d73530a5f59370557923312" name="libgpm2" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="3c22f9398dc233a89f1a80f11686594f1a2149c3da0cb1a7cf7097458125468d" name="libgpm2-32bit" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="jengelh@inai.de" date="1429012800">- Update license: the only GPL3 parts found are in the scripts/
  directory, which is not packaged.</changelog>
  <changelog author="werner@suse.de" date="1436443200">- Make libgpm able to handle ncurses ABI 6</changelog>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="b700b5cb8c83fef3d1b7fa8ec7413120bf2e327c9663b86491a6d9301033d168" name="libgraphviz6" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="7a22961d8b3ef89d4d6d703a30e204c340df6a2dbea6ed670c94f04e762dec53" name="libgraphviz6" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="f5829ca540fff3381c773b8c766c235e23409da7cd21e0ab5e924ffe2062e0e6" name="libgraphviz6" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="a20aec17dbfc1bb376df4a4cf64b41d959e8856c06be2f31108f76de3569bb84" name="libgraphviz6" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="09dc3913bc0e88534527d822ce5e8f8c1ebd6a932c8cfcf974812381f3a63cf0" name="libgstallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f48b6991c62ef21ff8c60d86d0ea7eba9dfd70a4efa00da90edaf6a87b24f1ee" name="libgstallocators-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ff97feb4bd8be36453c07baa99e7577b255c19258910b27554eb0f46358941ce" name="libgstallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d3b2fb83dfa9acbbbe99a40290b9d3b6cf8304d0e84b8463bb1b31e0a103ebea" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="38d06d6dc690369940b60cbf483ce80d2768f56dbf00409801db59898df26793" name="libgstallocators-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="869944fd310da72f93fa6002d8172d3a9c78f05e48c2db4f4cfd3a5d373e12c4" name="libgstapp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d7084da52e8b5b3bae403ca00f34dab37f3f1995046fd226294c158df4e1f1e3" name="libgstapp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="99381a4b60441a7ec61fa65bf8eef7a8ba4241852ab31ac03cdbc843bde26e5f" name="libgstapp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="61a228c10cd96ee789982a92c6377dd03841114e38e553647dae582dcac59ff8" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a5650037004016973a4d9ba08c40f34c0807a4f1a5f863817d3b93f52e466ce7" name="libgstapp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3cf31e702b88326a780f5421f5b684c63e749f9e604122e11ae56171afd8721c" name="libgstaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="89b76113217b0549da88e9b546b2adeefc44b94e7c7c0e5c50e04b36a892640e" name="libgstaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9273b1e058729d8a7f08216fafa91b29f97e31174e83af77c7a75970053a32a3" name="libgstaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="17a25cde2e5681f2ab6a11cf45de5f143222d7e63a8beed67e3a24e2d91ee3dc" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="90ad64856637d3b946d2b7a7c1a9d06ce03281a9d681df81e4a5aba8e5eb2e69" name="libgstaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="40235f5caadedb55214754c6713399e8bc87c469a0e2dbcc9ae0003b4832b75b" name="libgstfft-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d9f73dced04dbf751e47111ae9a37814ce9c3042530020b403d28ba0d4feada5" name="libgstfft-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="36770dc02f865f96234e2b6636298c609d3bde9833f28a9acf0dae6c6ab54df6" name="libgstfft-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fc42d8f4b4ccc30cce13aef05f68416a6cf07bc75c9402aea56e1eebb88184b0" name="libgstfft-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ee02beec1502889bc88429879c7653a347356433a57710f62db51108d054a0ff" name="libgstfft-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7ca617d93711f58044f9b8ad17ab86a98f789d04649a6915d4e8af5ed552f8b9" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="607cd4276e62013f74394652e3205651ac5b83d8936cc5b70be2da9042def7cd" name="libgstgl-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="75d6a50d3f8da99d937e57ca559286b8a53e844702940ca18aa2b8bb025cb6b9" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3a585e6f249f48e2ddd1f53abbfa58d4017014c4c4dd16bf3a85c31d45454a75" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="53a5064ba1edbbaded3d9894cd7af519dc1590412934fed87f9ff3a2a250acb0" name="libgstgl-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ea87e239794197d73b483683d12d0f8fa85a22498b356e8065714ce2fd7290fd" name="libgstpbutils-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9abed98c643593ef9616957cad9ec53a42c5c9fc2e8412a79010064af3db17f3" name="libgstpbutils-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="96ace2b2fe7bd4b665abc02369dcdcd79e2b23a5562428325eed9ef7a8da06e3" name="libgstpbutils-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4b06d118fbbe569d45f4f073ef9852d3564131374d78b6abff172549486dfc57" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="af519131386393ac0b826e5e07bd966dc5914525c9f958819cc57d252233c238" name="libgstpbutils-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="24fa6369b38c03a96fc21579f421fffd282711a22d8f56e4ba0e73d2facf9196" name="libgstreamer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="67239f6b0acf3c04b76c68e05cab6fb6ab1ea2de4f1fea4a96b44b6340a512ad" name="libgstreamer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="20c8e08661252d39dc782199395e4edc1c23985ae4d480e0f1b2bbee5e2810e5" name="libgstreamer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="e9cc57354277fcb01c58b8bd91659591b1c2060b5584edaee795df1bba024350" name="libgstreamer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="b50f7dc5cd1c7aff1d3333de98275e2e39662937bb547e57c9ef2c88d36058dd" name="libgstreamer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Replace python BuildRequires with python3-base.
  + Export PYTHON=/usr/bin/python3 before calling configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512129600">- Add explicit python3-xml BuildRequires: fix build on older
  versions of openSUSE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1512993600">- Update to version 1.12.4:
  + Dozens of fixes for various issues detected with the help of
    Google's OSS-Fuzz project.
  + Performance regressions with registering debug categories after
    gst_init() were fixed.
  + Regression with seeking back to 0 in souphttpsrc was fixed.
  + Regression with header rewriting in flacparse was fixed.
  + Regression with playbin/playsink leaking sinks was fixed.
  + Inconsistencies with DROPPED/HANDLED handling in pad probe
    handlers are fixed.
  + gst_bin_iterate_sorted() always returns sources last now, as
    documented.
  + gst_query_writable_structure() will never return NULL, for
    consistency with events.
  + Removal of metas from gst_buffer_meta_foreach() works correctly
    now.
  + OpenJPEG plugin builds with OpenJPEG &gt;= 2.3.
  + CDIO plugin builds with CDIO &gt;= 1.0.
  + gstreamer-vaapi works correctly with libva 1.0.
  + gst-libav was updated to ffmpeg 3.3.5.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules and many, many more!
  + Bugs fixed: bgo#788520, bgo#788617.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + pad: fix some stream deactivation deadlocks/races.
  + registrychunks: don't read from unaligned memory when loading
    registry.
  + ptp: fix build failure with #undef USE_MEASUREMENT_FILTERING.
  + downloadbuffer: Don't hold the mutex while posting the
    download-complete message.
  + playbin3: Fix accessing invalid index in GstStream when
    received select-stream event.
  + id3v2: re-fix handling of ID3 v2.4 tags with extended headers.
  + audio: fix handling of U32BE format.
  + videodecoder: Reset QoS time after pushing segment. This fixes
    playbin gapless playback with videos.
  + subparse: push out of last chunk of text if last line has no
    newline.
  + aacparse: When parsing raw input, accept frames of any size.
    This fixes handling of encoded silence.
  + splitmuxsrc: Improve not-linked handling.
  + rtspsrc: also proxy multicast-iface property to RTCP udpsrc.
  + flacdec: flush flac decoder on lost sync, so that it can
    re-sync.
  + matroskamux: Only mark new clusters as keyframe if they start
    on a keyframe or we're muxing only audio.
  + matroskamux: Clip maximum cluster duration to the maximum
    possible value.
  + h264parse: reset internal 'state' variable properly.
  + x264enc: fix build with newer x264 with support for multiple
    bit depths.
  + x265enc: Fix tagging of keyframes on output buffers.
  + glimagesink: Correct PAR in output caps when transforming.
  + vtdec: destroy and create the GL context on start()/stop(),
    fixing a refcount loop.
  + player: fix criticals when reading info/track properties that
    are NULL.
  + lv2: fix inverted boolean properties.
  + rtponviftimestamp: fix state change function init/reset, fixing
    memory corruption or leaks on shutdown.
  + libav: some build issues fixes.
  + rtsp-server: Place netaddress meta on packets received via TCP.
    Fixes keep-alive via RTCP in TCP interleaved mode.
  + rtsp-server: gi annotation fixes.
  + gst-libav: internal ffmpeg copy was updated to ffmpeg 3.3.6.
  + Various fixes for memory leaks, deadlocks and crashes in all
    modules.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522411200">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec;
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Add:
  + gio-2.0, gio-unix-2.0, gmodule-2.0 and gobject-2.0 pkgconfig
    modules BuildRequires to avoid implicit dependencies.
  + libcap-progs BuildRequires: new dependency.
- Drop libxml2-devel BuildRequires: it has been dropped upstream,
  and now so do we.
- Point fdupes to the data directory instead of the build root,
  which is a practice that must be avoided.
- Rebase gstreamer-rpm-prov.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1524484800">- Rename gst-plugin-scanner to gst-plugin-scanner-%{arch}, allowing
  multiple variants to co-exist (boo#1049452).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="dimstar@opensuse.org" date="1531396800">- Update gstreamer.macros and gstreamer.prov to be compatible with
  file 5.33, which differently idenfies executables from libraries.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="161ba213d31f3eba8edc4c8097f76e2b1a5d671befd546757ef393fb45028cb1" name="libgstriff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fb6de8aeeece96cb41ba297405334d41f0a4320fa04dea10644bb3ba58237700" name="libgstriff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="83a2e5d38d0e2793bf7a917cfa97411f27407002ac0583f4077cf829f078f713" name="libgstriff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="12340dd4a632166de66fe18cfd50ee2debc8d3ee7832d2f8a057737983f3f3ff" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="93ecb9032994e32bd32abf6d357fa0561bce3391ee53a88e447b91ecad2c4465" name="libgstriff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2ab5d8cc361928428c31ac68e0f2ffeab5107a7be90fd837e21faf83c66363b4" name="libgstrtp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d0fe0e83886772dd50d7065d3fe83b57e216e5b24271e2d80eef5ef58df0623c" name="libgstrtp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="cd22485f576972151955a40abcc185944e5109997f4d031b053ce31cf7353fa7" name="libgstrtp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="62a20c350c8562c452a9d863d9bf532b0011bf1c46e34c005d7227d159e8a32c" name="libgstrtp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="69e0965857e7ba8ed4920b8a2caf3e1d4996a0a394263a92f6c7658685931b29" name="libgstrtp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b99a8d1f4b61eacab6794cfa27427f1235afef11b432e84ed767ecb05fb13dbd" name="libgstrtsp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0579a09e50ef985126241ee2c1ac674bbb1b5ecfc7fb32e1834dee349f9ba7a3" name="libgstrtsp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4aaa9cc456387047cdb00679970dc3030061a5c807fc2dc664b1f21395784740" name="libgstrtsp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0b370bc481efed3058c58cf3a09befe41c683f1f23e070965c17e365de77ff77" name="libgstrtsp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c0eab4c0f08174563fcd7ca2491de47989961dad3ffd1cfee5e6576f1e35f6c0" name="libgstrtsp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d6eaa20b0f284aab3543fa6dfb33de67ef6f5bf69790873748f5ea67a0b36bf6" name="libgstsdp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ae20191a72769db253eb676b7a808d96daac340a213a9ed84fc8a43a66d1022c" name="libgstsdp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="66b6c779438003d121c639faf97cfa088d0c99d98eeadb669b85e7e82ce5d2f0" name="libgstsdp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4a91f217cb35f4c65d042afe85c5f7b169240d9408db9be04884ca4a3d68b703" name="libgstsdp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="73d6b098f4fcaad44aa56c5f1252a80b5c0de6b284abd688d1f4fa00906383a3" name="libgstsdp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a6d6f44c37ef41062564f8c5fe1ff978388224a362525e896754351be7313fbc" name="libgsttag-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0eeae242791faee80ee38d22073485dac2313ebb14e318b46772768e8c4179f5" name="libgsttag-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0d0c7ecdc76b93dfd3b5a2f900529c902ec344d845a5c8cc8338ae24349f8b67" name="libgsttag-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="df75ac9ae88748c35b08b4b8dcf245a8a03bf8461399fde33ba1d2fd0fc57e04" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0a81a45ebffc05dd7be25e1d71e91a6d7b6bdabc27d6edcbe55a261c7f47f4e6" name="libgsttag-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="355f25e29dc3e8a314229f57e70a4f93cfae239b8d3db4d9cae69748efbcb71f" name="libgstvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="56912d001819cea25dba02cdf82468b30c5e5f60fc42957dc978d27e39816374" name="libgstvideo-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f536528bd19aa00cafb4f124cdf71df58447fb4c990c914ca37946d9ad9ada3a" name="libgstvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bce65a5eae421295e4d9ff6d5d2df9dc67523df14abd54fe976f8ba7985ef088" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4eebaf11efd726ca39f5f5a883b3132e630492e9cec50246bb02276130b945d6" name="libgstvideo-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1528891200">- Conditionalize pkgconfig(graphene-1.0) BuildRequires: fix build
  for Leap 42.3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize orc and pkgconfig(wayland-egl) BuildRequires and
  enable-orc call, fix build for SLE 12 SP3.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + xvimage: Fix symbol redefine build error.
  + glcolorbalance: Support OES textures for input/passthrough.
  + meson: gl: fix backported patch.
  + gl/build: fixed failed compilation due to missing EGLuint64KHR
    typedef.
  + parsebin: Don't try to continue autoplugging a parser if we got
    raw caps.
  + audiobasesrc: Round down segsize to an integer number of
    samples.
  + discoverer: Don't crash when running with -v if channel-mask==0
    and &gt;7 channels.
  + gldownloadelement: fix build with msvc.
  + subparse: Don't read beyond array.
  + ogg: Avoid undefined granule shift.
  + libs: g-ir-scanner: do not hardcode libtool path.
  + rawvideoparse: fix typo in 'plane-offsets' description.
  + video: fix some GIR array annotations.
  + audio: fix some GIR array annotations.
  + meson: gl: remove non-headers from gl_prototype_headers.
  + meson: install the man pages for the command line tools.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="davejplater@gmail.com" date="1556280000">- Added:
  0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch
  which fixes:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/issues/384
  "Segfault since 1.16" which also occurs in 1.14.4.</changelog>
  <changelog author="mgorse@suse.com" date="1558008000">- Add CVE-2019-9928.patch: fix a heap overflow in the rtsp
  connection parser (boo#1133375 CVE-2019-9928).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + audioconvert: fix endianness conversion for unpacked formats
    (e.g. S24_32BE).
  + audioringbuffer: Fix wrong memcpy address when reordering
    channels.
  + decodebin2: Make sure to remove pad probes when freeing
    GstDecodeGroup.
  + glviewconvert: fix output when a transformation matrix is used.
  + glupload:
  - Prevent segfault when updating caps.
  - dmabuf: be explicit about gl formats used.
  + gl/egl: Determine correct format on dmabuf import.
  + id3tag: validate the year from v1 tags before passing to
    GstDateTime.
  + rtpbasepayload: Fix sequence numbers when using buffer lists.
  + rtspconnection:
  - Fix security issue, potential heap overflow (CVE-2019-9928).
  - Fix GError set over the top of a previous GError.
  - Do not duplicate authentication headers.
  + subparse: don?t assert when failing to parse subrip timestamp.
  + video: various convert sample frame fixes.
  + video-converter: fix conversion from I420_10LE/BE, I420_12LE/BE,
    A420_10LE/BE to BGRA/RGBA which created corrupted output.
  + video-format: Fix GBRA_10/12 alpha channel pixel strides.
- Drop upstream fixed patches:
  + CVE-2019-9928.patch
  + 0001-id3tag-Correctly-validate-the-year-from-v1-tags-befo.patch</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson for Tumbleweed.
- Adjust line to get the minimum required gstreamer version.
- Disable tremor (needs libvorbisidec)
- Disable examples.
- Package libgstcompositor.so and libgstoverlaycomposition.so.
- Adjust documentation directory.
- Add gst-plugins-base-doc-build-fix.patch: fix build with
  automake.
- Up gstreamer-plugins-bad Conflicts.
- Now requires glib2 &gt;= 2.40.
- Obsolete libgstbadvideo-1_0-0: now part of -base.</changelog>
  <changelog author="mliska@suse.cz" date="1563969600">- Add gstreamer-plugins-base-arm-neon-configuration.patch
  as an upstream backport of:
  https://gitlab.freedesktop.org/gstreamer/gst-plugins-base/commit/d8d4904e
- Use %make_build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="45d5cdd38ebdaedf628ca0761bacde4804eeb3b0a4f445b2cce6585cec58e7ee" name="libgupnp-1_2-0" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="44724e73bb284b9d57a9eda60bc8d78458dc2299fd830ce1f99491389100c187" name="libgupnp-1_2-0" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="c7175bd2d18856fe1541af4ec092b5929a71cd4f20c686ba97be8fce9bc350dd" name="libgupnp-1_2-0" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="aedaea58e57d6e082e9cae41c07ead3dd93ed80ca72127207ec4509711a170db" name="libgupnp-1_2-0" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="cc341efb059cd8143c2f83987fa88849d20577d5531dfca60d3f6c0d2c1b5d60" name="libgupnp-1_2-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="51f4a96309840f1b2fa41d1bf02a0cbaf5d263c99b7ab010ad3865b50867267f" name="libgupnp-devel" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="9ad1a93d92223b7a691f445d15e741194c444b3cb4c1c909c660c80cdfdcb110" name="libgupnp-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="0fb675ed17947eb3561ec92b170949bfb1d34f1a9e0a2ac09217bacaff2f8797" name="libgupnp-devel" arch="s390x">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="98f42ad456291f8494a0e6fde34310f41742d612ef381c3bd5b25d275d59627f" name="libgupnp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.2" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1451822400">- Update to version 0.20.15:
  + Remove gnome-common
  + Fix issue with gupnp_service_signals_autoconnect() blocking
    endlessly.
  + Fix return type for BIN_HEX.
  + Update some m4 macros.
  + Fix typos in API docs.
  + NetworkManager context manager:
  - Fix use-after-free issue.
  - Fix various static code analysis findings.
  + Netlink context manager:
  - Use proper macros for RTM_*ADDRESS messages.
  - Use device name from netlink.
  - Add possibility to dump received netlink packets for
    debugging.
  - Fix issues with losing contexts after DHCP renew happens.
  - Some style fixes.
  + Bugs fixed: bgo#736365, bgo#741257, bgo#750936, bgo#752490,
    bgo#759000.</changelog>
  <changelog author="dimstar@opensuse.org" date="1455019200">- Update to version 0.20.16:
  + Don't hardcode python path in gupnp-binding-tool.
  + Check for IFA_FLAGS to not bind ourselves to a recent kernel
    version.
  + Add missing m4 files.
  + Fix issues with introspection.
  + Make GUPnPServiceAction boxed.
  + Some JavaScript examples.
  + Distribute VAPI file in tarball.
  + Bugs fixed: bgo#760217, bgo#760430, bgo#761265.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1461672000">- Update to version 0.20.17:
  + Update autogen.sh from GNOME template.
  + Cache user agents by IP.
  + Remove intltool.
  + Use newTargetValue in light example.
  + Bugs fixed: bgo#653894, bgo#763945, bgo#764050.</changelog>
  <changelog author="tyang@suse.com" date="1463659200">- Update to GNOME 3.20.2  Fate#318572.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466510400">- Update to version 0.20.18:
  + Retry description URL on failure.
  + Bugs fixed: bgo#694450.</changelog>
  <changelog author="zaitor@opensuse.org" date="1471348800">- Update to version 0.99.0:
  + Fix build on OS X.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474286400">- Update to version 1.0.0:
  + No changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476532800">- Update to version 1.0.1:
  + Connman CM: Various fixes.
  + Linux CM: Fix compiler warning about negative shift.
  + Documentation:
  - Fix FSF address.
  - Fix references.
  + Build: Update ax_append_link_flags.
  + Bugs fixed: bgo#770318.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 1.0.2:
  + Fix a potential crash of GUPnPProxy when trying to access a
    dangling GUPnPServiceProxy pointer of a server handler
    (bgo#777491).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1528113600">- Drop NetworkManager recommends from libgupn-1_0-4: There is no
  reason to pollute a system with NM just because something pulls
  in libgupnp (boo#1082090).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533038400">- Update to version 1.0.3:
  + Avoid a crash in gupnp_root_device_constructor.
  + Propagage User-Agent from Cache.
  + Fix potential issue with boolean vs. bitwise evaluation.
  + Fix a crash in GUPnPServiceProxy::subscription_expire.
  + Accept broken Action header without the ".
  + Fix issue with strcpy destination buffer size in linux context
    manager.
  + Bugs fixed: bgo#780640, bgo#780715, bgo#793955.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 1.0.4:
  + Fix some win32-specific warnings.
  + Backport meson support form master.
  + Fix introspection annotations for get_icon_url
  + Avoid static buffer in linux context manager.
  + Fix wrong include in ACL header.
  + Fix endless loop in service proxy.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217600">- Update to version 1.1.1:
  + Fix issue when building VAPI.
  + Pass on network mask from linux CM.
  + Properly rewrite v6 link-local urls when accessing.
  + Minor introspection annotation fixes.
  + Properly filter v6 scopes in linux CM.
  + Fix compile issues with linux CM when there is no wireless.h.
  + Fix doble-free in linux CM.
  + Simplify build tests a bit.
- Changes from version 1.1.0:
  + Bump API and ABI version.
  + GUPnPRootDevice implements GInitable.
  + Clean-up functions added for GObject-Introspection
    compatibility.
  + Remove all deprecated functions from GUPnP 1.0 API.
  + Switch build to Meson.
  + Port everything to new GLib type macros.
  + Add IPv6 support to Linux context manager.
  + Fix IPv6 LL support for context.
  + Add gupnp_context_manager_create_full for specifying the socket
    family.
  + Bugs fixed: bgo#654446, bgo#770318, bgo#777491, bgo#780640,
    bgo#780715, bgo#793955.
- Switch to meson buildsystem, add meson and gtk-doc BuildRequires
  and macros.
- Add pkgconfig(gio-2.0), pkgconfig(glib-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0) BuildRequires:
  align with what meson checks for.
- Replace pkgconfig(gssdp-1.0) with pkgconfig(gssdp-1.2)
  BuildRequires following upstreams changes.
- Add soname and sover defines and set them to 1_2-0 and 1.2, make
  future API and ABI bumps easier.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217601">- Update to version 1.1.2:
  + Use python3 in binding tool.
  + Avoid a static buffer in the linux context manager.
  + Add UDA version and address family to linux context manager.
  + Implement ssdp:update in context manager.
  + Update documentation.
  + Introduce new sync/async service proxy call API.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217602">- Update to version 1.2.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559217603">- Update to version 1.2.1:
  + Fix a deadlock when cancelling an action.
  + Do not call-back a cancelled action.
  + Fix public dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577966400">- Update to version 1.2.2:
  + Fix macOS dylib versioning.
  + Fix endless loop on early notify.
  + Several documentation fixes.
  + Implement version-independent type registration in
    ResourceFactory.
  + Fix an issue with implementation of the depracted functions.
  + Fix an issue with including net/if.h and linux/if.h.
  + Add async introspection functions matching the usual GIO
    function pattern.
  + Go through main loop if introspection fails before the actual
    network request.
  + Bump required GLib version to 2.58.</changelog>
  <changelog author="mgorse@suse.com" date="1623931200">- Add gupnp-validate-host-header.patch: validate host header
  (boo#1186590 glgo#GNOME/gupnp#24 CVE-2021-33516).</changelog>
</package>
<package pkgid="8425ca5cd80089d3e18007d84c6dbceb14cba14c817c3a57c4f096968442bf48" name="libhivex0" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="ef65bdd2df8181c35a131ecea784bfe7fee5b47ede9df6309896d30dac8382b7" name="libhivex0" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="b52667f89b085802fe6eea03aaddbc9e58843255ecdd43e95e4b304b95d5d804" name="libhivex0" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="6d2719adf4cbe3b6ad7371bf2480ed74bc9d7efaa77d03f33811de0a11313a13" name="libhivex0" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="17eb4b462cd774241bd750df3462d7e41f0b5393c05b27e0a1d434dfe96a2894" name="libhogweed4" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="6eeb6ef7dfc4b05ea5c5ab03438a2331f94dfd25fff5a56fb0cc3fc12b0cc0c2" name="libhogweed4" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="8239f76b503a9125eb03ad7bba3e33f30177339557067688a45a50db113093dd" name="libhogweed4" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="1cb1f01ae218566912330b9bff2d819515166d461af57cb6b60e5605992852cc" name="libhogweed4" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="57349919e13809b408924a84b708a9cfbbab11740254f8c2364a7ec61087c614" name="libhogweed4-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="cdbcd49276ad924e14e71c13b0823f045331972343f4440f975682f77ccdf3de" name="libipa_hbac-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="fc6e9d93f66f0cfb7dbe4f147f2cecc3190e3cad5b693ab38dd299e17bfcc2fe" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="61f2adf651d92a3fdaa01ddb235beff428f467ed402fc44b1afc982de4d1b7e7" name="libipa_hbac-devel" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="50d7856dfd8f8e2b2dcdc287918b73aefd441e0629f8aaf9c9b4c639a4435396" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="338c90dd4d11d5d3478576e4e900cbb5af5d3f71197c0e24079abfd57790e503" name="libipa_hbac0" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="8a6f73b17f85d25632c47786ef2fc6e519207909684b8450ac427533002c1787" name="libipa_hbac0" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="61039ba0c61e763c13e677f0717883ca1fead251bebdc93b1432ea67da31c118" name="libipa_hbac0" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="748ffa6f99d20863c209b16d1d33855a493a17be13e70b68239e3c5c83e72d53" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="a2086957adb94ceb0d0fec0ef9d88dd7e0f680d1c3cdacfb975bec8f23ab3072" name="libirs-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4acb99eb9a403e52c1f75e9645fb507e91fcbcbaddca4ce4358d317215cc5f1b" name="libirs-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fb9b74d7ee6451e51ab8ce4e41defc21db07bdede0e67a6e0967b7f3928f07e2" name="libirs-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4bcae08bed249cb03931e99d74cbca77fe71e1e3a9ec024d4b385f6a0e57240b" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a62291a780f1acd0f8c066f0dfeb1c8dc0845c613fc3b9912eb15d0b4e9c2ff5" name="libirs1601" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3d4b4063a035774b1b02b7d0908fe0cef5d8302815ed7c7a912bc3c26613a6dc" name="libirs1601" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="7044b92c3214d0d894c3ba91a5325c47437acf113d456af57d03e5570ec69f8e" name="libirs1601" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="50077793b668617696ba48e48f8bee235ed8a59767233573cba27c3d23c4c3fc" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f199419d75074194464381052ac60b6a53a6702527fa90549de93ebf79cfb48c" name="libisc1606" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c30a58fb8957039c5122ae575f1b8f543c4660003511dae22a1c465e56472744" name="libisc1606" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ca51dca7ddbe1b1be8299edabc4d35dad36cfd2735beacb86d50122e75495687" name="libisc1606" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="98dd928a177c2e33de896710cc75c1a2a5a1c25a572bd2b6f18657d5e9566f03" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="7fcb302d80665551c4c018b1d527dc43038f8af126df901a406ee694df55393b" name="libisccc1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d094e22a8414843b5fc2f52a08fe276310d8d2a81a49bdc5d20f3c1c3e446b76" name="libisccc1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b97b6f6231dd07f6060e9c4cb7953136ebea0c9ff8410a5594914d85951f528a" name="libisccc1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3c3327c796a4cbdb149fa561c25f096b4305f003ec2edf8db16fa4052d45c17a" name="libisccc1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="764871762af1413fda061533e0388bd1b3ba4f69b436a4929aa416fad3e33670" name="libisccfg1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e827e27732f34c21b47cd5d3e00e404aea1ea102f2fe2529c3db98cad8683efa" name="libisccfg1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="2279227b222541207a80e352c0a857831ce52eb5e416566156f4005df9507ae4" name="libisccfg1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="25e8e45d66bad6f6fb4a9233cc6f84d0cbbf088f361dec4282d075f6663cdb9b" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="cbda08c78201e9a50f9bdcfc183319aff6d233d075cabce941d52bc12011816b" name="libitm1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4f4012bb87945ffc7b42ccf4ea1b8a85f7d56ac79ae6a5bce00b6423f906e6bd" name="libitm1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3058946490c5673bf78636fe43d5d57426f7794d347a89ee66a7f39e764a1750" name="libitm1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="52e2716c14fd3204d0b1786c25443a60d579f309f8bb60c0e4bf38d39713408e" name="libitm1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bb243fdaa76bb725d78e89d41e23d66b3f7d557238dc0ad6cda8fd45a5dcfdc5" name="libitm1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cb2da7c97ed4189825b560cdcbd62fbf246ec88c3bb0b252890f3a8b2c570406" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7543da3b2456f82f0d707b90aa1a9d7dc90362c382b43b090e84101946576a77" name="libjavascriptcoregtk-4_0-18" arch="aarch64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 2.28.3 (boo#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.</changelog>
  <changelog author="mgorse@suse.com" date="1596024000">- Update to version 2.28.4 (boo#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.</changelog>
  <changelog author="jengelh@inai.de" date="1596715200">- Add no-forced-sse.patch, cure execution of illegal instruction
  in i586 firefox.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.29.92:
  + Fix user agent header after a redirect when a new quirk is
    required.
  + Stop using firefox user agent quirk for google docs.
  + Fix rendering frames timeline panel in web inspector.
  + Fix per-thread cpu usage in web inspector.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.91:
  + Fix a web process crash introduced in 2.29.90.
- Changes from version 2.29.90:
  + Fix font variation settings when font smoothing setting is also
    present.
  + Fix HTML drag and drop operations.
  + Fix argument order for clone syscall seccomp filter on s390x.
  + Fix a crash when selecting text.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.4:
  + Add support for backdrop filters.
  + Add support for text-underline-offset and
    text-decoration-thickness.
  + Add OpenCDM and AV1 support to media backend.
  + Add new API to get ITP data summary.
  + Use mobile user-agent on tablets.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.3:
  + Add webkit_authentication_request_get_security_origin.
  + Change the cookies accept policy to always when no-third-party
    is set and ITP is enabled.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Add support for sndio to bubblewrap sandbox.
  + Also handle dark themes when the name ends with -Dark.
  + Fix a race condition causing a crash in media player.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.2:
  + Add Intelligent Tracking Prevention (ITP) support.
  + Add support for video formats in img elements.
  + Add API to handle video autoplay policy that now defaults to
    disallow autoplay videos with audio.
  + Add API to mute a web view.
  + Add API to allow applications to handle the HTTP authentication
    credential storage.
  + Add a WebKitSetting to set the media content types requiring
    hardware support.
  + Fix a crash during drag an drop due to a bug introduced in
    2.29.1.
  + Do not start page load during animation in back/forward
    gesture.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.1:
  + Stop using GTK theming to render form controls.
  + Add API to disable GTK theming for scrollbars too.
  + Fix several race conditions and threading issues in the media
    player.
  + Add USER_AGENT_BRANDING build option.
  + Add paste as plain text option to the context menu for rich
    editable content.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Rebase webkit2gtk3-fdo-soname.patch.
- Add pkgconfig(libsystemd) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1599393600">- Add seccomp-build-fix.patch: pass seccomp include directory to
    g++.
- Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed.</changelog>
  <changelog author="mgorse@suse.com" date="1599480000">- Add wpe-shm-check.patch: make SHM initialization fail for
  wpebackend-fdo &lt; 1.7.0.</changelog>
  <changelog author="mgorse@suse.com" date="1600084800">- Update to version 2.30.0:
  + Fix NTLM authentication.
  + Don't try to use SHM on wayland with older wpebackend-fdo.
  + Fix the build due to seccomp.h header not found.
  + Security fixes: CVE-2020-9948, CVE-2020-9951.
- Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1600776000">- Update to version 2.30.1:
  + Bring back the environment variable to force single process
    mode when PSON is disabled.
  + Fix downloads started by an ephemeral web context.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).</changelog>
  <changelog author="dimstar@opensuse.org" date="1603454400">- Update to version 2.30.2:
  + Fix scrolling when smooth scrolling is enabled in async
    scrolling mode.
  + Fix WebSocket requests with same-site cookies.
  + Fix TLS certificate information for service workers.
  + Handle chassis type when its value is quoted.
  + Fix the build with ENABLE_MEDIA_STREAM enabled and
    ENABLE_WEB_RTC_DISABLED.
  + Fix the build with ENABLE_GAMEPAD enabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="e607a4e72f92c407a2565eb79c26076a0de60fb1ce014da39d149c848535d891" name="libjavascriptcoregtk-4_0-18" arch="ppc64le">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 2.28.3 (boo#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.</changelog>
  <changelog author="mgorse@suse.com" date="1596024000">- Update to version 2.28.4 (boo#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.</changelog>
  <changelog author="jengelh@inai.de" date="1596715200">- Add no-forced-sse.patch, cure execution of illegal instruction
  in i586 firefox.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.29.92:
  + Fix user agent header after a redirect when a new quirk is
    required.
  + Stop using firefox user agent quirk for google docs.
  + Fix rendering frames timeline panel in web inspector.
  + Fix per-thread cpu usage in web inspector.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.91:
  + Fix a web process crash introduced in 2.29.90.
- Changes from version 2.29.90:
  + Fix font variation settings when font smoothing setting is also
    present.
  + Fix HTML drag and drop operations.
  + Fix argument order for clone syscall seccomp filter on s390x.
  + Fix a crash when selecting text.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.4:
  + Add support for backdrop filters.
  + Add support for text-underline-offset and
    text-decoration-thickness.
  + Add OpenCDM and AV1 support to media backend.
  + Add new API to get ITP data summary.
  + Use mobile user-agent on tablets.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.3:
  + Add webkit_authentication_request_get_security_origin.
  + Change the cookies accept policy to always when no-third-party
    is set and ITP is enabled.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Add support for sndio to bubblewrap sandbox.
  + Also handle dark themes when the name ends with -Dark.
  + Fix a race condition causing a crash in media player.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.2:
  + Add Intelligent Tracking Prevention (ITP) support.
  + Add support for video formats in img elements.
  + Add API to handle video autoplay policy that now defaults to
    disallow autoplay videos with audio.
  + Add API to mute a web view.
  + Add API to allow applications to handle the HTTP authentication
    credential storage.
  + Add a WebKitSetting to set the media content types requiring
    hardware support.
  + Fix a crash during drag an drop due to a bug introduced in
    2.29.1.
  + Do not start page load during animation in back/forward
    gesture.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.1:
  + Stop using GTK theming to render form controls.
  + Add API to disable GTK theming for scrollbars too.
  + Fix several race conditions and threading issues in the media
    player.
  + Add USER_AGENT_BRANDING build option.
  + Add paste as plain text option to the context menu for rich
    editable content.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Rebase webkit2gtk3-fdo-soname.patch.
- Add pkgconfig(libsystemd) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1599393600">- Add seccomp-build-fix.patch: pass seccomp include directory to
    g++.
- Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed.</changelog>
  <changelog author="mgorse@suse.com" date="1599480000">- Add wpe-shm-check.patch: make SHM initialization fail for
  wpebackend-fdo &lt; 1.7.0.</changelog>
  <changelog author="mgorse@suse.com" date="1600084800">- Update to version 2.30.0:
  + Fix NTLM authentication.
  + Don't try to use SHM on wayland with older wpebackend-fdo.
  + Fix the build due to seccomp.h header not found.
  + Security fixes: CVE-2020-9948, CVE-2020-9951.
- Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1600776000">- Update to version 2.30.1:
  + Bring back the environment variable to force single process
    mode when PSON is disabled.
  + Fix downloads started by an ephemeral web context.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).</changelog>
  <changelog author="dimstar@opensuse.org" date="1603454400">- Update to version 2.30.2:
  + Fix scrolling when smooth scrolling is enabled in async
    scrolling mode.
  + Fix WebSocket requests with same-site cookies.
  + Fix TLS certificate information for service workers.
  + Handle chassis type when its value is quoted.
  + Fix the build with ENABLE_MEDIA_STREAM enabled and
    ENABLE_WEB_RTC_DISABLED.
  + Fix the build with ENABLE_GAMEPAD enabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="0e3115853521acb8be14e22613db6d982fd4ddd38ff10c828c42d37f346351a4" name="libjavascriptcoregtk-4_0-18" arch="s390x">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 2.28.3 (boo#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.</changelog>
  <changelog author="mgorse@suse.com" date="1596024000">- Update to version 2.28.4 (boo#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.</changelog>
  <changelog author="jengelh@inai.de" date="1596715200">- Add no-forced-sse.patch, cure execution of illegal instruction
  in i586 firefox.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.29.92:
  + Fix user agent header after a redirect when a new quirk is
    required.
  + Stop using firefox user agent quirk for google docs.
  + Fix rendering frames timeline panel in web inspector.
  + Fix per-thread cpu usage in web inspector.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.91:
  + Fix a web process crash introduced in 2.29.90.
- Changes from version 2.29.90:
  + Fix font variation settings when font smoothing setting is also
    present.
  + Fix HTML drag and drop operations.
  + Fix argument order for clone syscall seccomp filter on s390x.
  + Fix a crash when selecting text.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.4:
  + Add support for backdrop filters.
  + Add support for text-underline-offset and
    text-decoration-thickness.
  + Add OpenCDM and AV1 support to media backend.
  + Add new API to get ITP data summary.
  + Use mobile user-agent on tablets.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.3:
  + Add webkit_authentication_request_get_security_origin.
  + Change the cookies accept policy to always when no-third-party
    is set and ITP is enabled.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Add support for sndio to bubblewrap sandbox.
  + Also handle dark themes when the name ends with -Dark.
  + Fix a race condition causing a crash in media player.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.2:
  + Add Intelligent Tracking Prevention (ITP) support.
  + Add support for video formats in img elements.
  + Add API to handle video autoplay policy that now defaults to
    disallow autoplay videos with audio.
  + Add API to mute a web view.
  + Add API to allow applications to handle the HTTP authentication
    credential storage.
  + Add a WebKitSetting to set the media content types requiring
    hardware support.
  + Fix a crash during drag an drop due to a bug introduced in
    2.29.1.
  + Do not start page load during animation in back/forward
    gesture.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.1:
  + Stop using GTK theming to render form controls.
  + Add API to disable GTK theming for scrollbars too.
  + Fix several race conditions and threading issues in the media
    player.
  + Add USER_AGENT_BRANDING build option.
  + Add paste as plain text option to the context menu for rich
    editable content.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Rebase webkit2gtk3-fdo-soname.patch.
- Add pkgconfig(libsystemd) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1599393600">- Add seccomp-build-fix.patch: pass seccomp include directory to
    g++.
- Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed.</changelog>
  <changelog author="mgorse@suse.com" date="1599480000">- Add wpe-shm-check.patch: make SHM initialization fail for
  wpebackend-fdo &lt; 1.7.0.</changelog>
  <changelog author="mgorse@suse.com" date="1600084800">- Update to version 2.30.0:
  + Fix NTLM authentication.
  + Don't try to use SHM on wayland with older wpebackend-fdo.
  + Fix the build due to seccomp.h header not found.
  + Security fixes: CVE-2020-9948, CVE-2020-9951.
- Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1600776000">- Update to version 2.30.1:
  + Bring back the environment variable to force single process
    mode when PSON is disabled.
  + Fix downloads started by an ephemeral web context.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).</changelog>
  <changelog author="dimstar@opensuse.org" date="1603454400">- Update to version 2.30.2:
  + Fix scrolling when smooth scrolling is enabled in async
    scrolling mode.
  + Fix WebSocket requests with same-site cookies.
  + Fix TLS certificate information for service workers.
  + Handle chassis type when its value is quoted.
  + Fix the build with ENABLE_MEDIA_STREAM enabled and
    ENABLE_WEB_RTC_DISABLED.
  + Fix the build with ENABLE_GAMEPAD enabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="0d97dd7fae3b6105d3d8cf4ed39563373a6ff1246a6472b3ddc05909eaec74c9" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 2.28.3 (boo#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.</changelog>
  <changelog author="mgorse@suse.com" date="1596024000">- Update to version 2.28.4 (boo#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.</changelog>
  <changelog author="jengelh@inai.de" date="1596715200">- Add no-forced-sse.patch, cure execution of illegal instruction
  in i586 firefox.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.29.92:
  + Fix user agent header after a redirect when a new quirk is
    required.
  + Stop using firefox user agent quirk for google docs.
  + Fix rendering frames timeline panel in web inspector.
  + Fix per-thread cpu usage in web inspector.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.91:
  + Fix a web process crash introduced in 2.29.90.
- Changes from version 2.29.90:
  + Fix font variation settings when font smoothing setting is also
    present.
  + Fix HTML drag and drop operations.
  + Fix argument order for clone syscall seccomp filter on s390x.
  + Fix a crash when selecting text.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.4:
  + Add support for backdrop filters.
  + Add support for text-underline-offset and
    text-decoration-thickness.
  + Add OpenCDM and AV1 support to media backend.
  + Add new API to get ITP data summary.
  + Use mobile user-agent on tablets.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.3:
  + Add webkit_authentication_request_get_security_origin.
  + Change the cookies accept policy to always when no-third-party
    is set and ITP is enabled.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Add support for sndio to bubblewrap sandbox.
  + Also handle dark themes when the name ends with -Dark.
  + Fix a race condition causing a crash in media player.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.2:
  + Add Intelligent Tracking Prevention (ITP) support.
  + Add support for video formats in img elements.
  + Add API to handle video autoplay policy that now defaults to
    disallow autoplay videos with audio.
  + Add API to mute a web view.
  + Add API to allow applications to handle the HTTP authentication
    credential storage.
  + Add a WebKitSetting to set the media content types requiring
    hardware support.
  + Fix a crash during drag an drop due to a bug introduced in
    2.29.1.
  + Do not start page load during animation in back/forward
    gesture.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.1:
  + Stop using GTK theming to render form controls.
  + Add API to disable GTK theming for scrollbars too.
  + Fix several race conditions and threading issues in the media
    player.
  + Add USER_AGENT_BRANDING build option.
  + Add paste as plain text option to the context menu for rich
    editable content.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Rebase webkit2gtk3-fdo-soname.patch.
- Add pkgconfig(libsystemd) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1599393600">- Add seccomp-build-fix.patch: pass seccomp include directory to
    g++.
- Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed.</changelog>
  <changelog author="mgorse@suse.com" date="1599480000">- Add wpe-shm-check.patch: make SHM initialization fail for
  wpebackend-fdo &lt; 1.7.0.</changelog>
  <changelog author="mgorse@suse.com" date="1600084800">- Update to version 2.30.0:
  + Fix NTLM authentication.
  + Don't try to use SHM on wayland with older wpebackend-fdo.
  + Fix the build due to seccomp.h header not found.
  + Security fixes: CVE-2020-9948, CVE-2020-9951.
- Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1600776000">- Update to version 2.30.1:
  + Bring back the environment variable to force single process
    mode when PSON is disabled.
  + Fix downloads started by an ephemeral web context.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).</changelog>
  <changelog author="dimstar@opensuse.org" date="1603454400">- Update to version 2.30.2:
  + Fix scrolling when smooth scrolling is enabled in async
    scrolling mode.
  + Fix WebSocket requests with same-site cookies.
  + Fix TLS certificate information for service workers.
  + Handle chassis type when its value is quoted.
  + Fix the build with ENABLE_MEDIA_STREAM enabled and
    ENABLE_WEB_RTC_DISABLED.
  + Fix the build with ENABLE_GAMEPAD enabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="5a9f6193dec018a5b2a87e81055135cd66cf5c5eee6b1ff1a24518bb776f42b1" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="bjorn.lie@gmail.com" date="1594382400">- Update to version 2.28.3 (boo#1173998):
  + Enable kinetic scrolling with async scrolling.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Fix threading issues in the media player.
  + Fix several crashes and rendering issues.
  + Security fixes:  CVE-2020-9802, CVE-2020-9803, CVE-2020-9805,
    CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850,
    CVE-2020-13753.</changelog>
  <changelog author="mgorse@suse.com" date="1596024000">- Update to version 2.28.4 (boo#1174662):
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894,
    CVE-2020-9895, CVE-2020-9915, CVE-2020-9925.</changelog>
  <changelog author="jengelh@inai.de" date="1596715200">- Add no-forced-sse.patch, cure execution of illegal instruction
  in i586 firefox.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.29.92:
  + Fix user agent header after a redirect when a new quirk is
    required.
  + Stop using firefox user agent quirk for google docs.
  + Fix rendering frames timeline panel in web inspector.
  + Fix per-thread cpu usage in web inspector.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.91:
  + Fix a web process crash introduced in 2.29.90.
- Changes from version 2.29.90:
  + Fix font variation settings when font smoothing setting is also
    present.
  + Fix HTML drag and drop operations.
  + Fix argument order for clone syscall seccomp filter on s390x.
  + Fix a crash when selecting text.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.4:
  + Add support for backdrop filters.
  + Add support for text-underline-offset and
    text-decoration-thickness.
  + Add OpenCDM and AV1 support to media backend.
  + Add new API to get ITP data summary.
  + Use mobile user-agent on tablets.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.3:
  + Add webkit_authentication_request_get_security_origin.
  + Change the cookies accept policy to always when no-third-party
    is set and ITP is enabled.
  + Fix web process hangs on large GitHub pages.
  + Bubblewrap sandbox should not attempt to bind empty paths.
  + Add support for sndio to bubblewrap sandbox.
  + Also handle dark themes when the name ends with -Dark.
  + Fix a race condition causing a crash in media player.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.2:
  + Add Intelligent Tracking Prevention (ITP) support.
  + Add support for video formats in img elements.
  + Add API to handle video autoplay policy that now defaults to
    disallow autoplay videos with audio.
  + Add API to mute a web view.
  + Add API to allow applications to handle the HTTP authentication
    credential storage.
  + Add a WebKitSetting to set the media content types requiring
    hardware support.
  + Fix a crash during drag an drop due to a bug introduced in
    2.29.1.
  + Do not start page load during animation in back/forward
    gesture.
  + Fix several crashes and rendering issues.
- Changes from version 2.29.1:
  + Stop using GTK theming to render form controls.
  + Add API to disable GTK theming for scrollbars too.
  + Fix several race conditions and threading issues in the media
    player.
  + Add USER_AGENT_BRANDING build option.
  + Add paste as plain text option to the context menu for rich
    editable content.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Rebase webkit2gtk3-fdo-soname.patch.
- Add pkgconfig(libsystemd) BuildRequires: new dependency.</changelog>
  <changelog author="mgorse@suse.com" date="1599393600">- Add seccomp-build-fix.patch: pass seccomp include directory to
    g++.
- Re-enable bubblewrap sandbox for SLE-15-SP2 and Tumbleweed.</changelog>
  <changelog author="mgorse@suse.com" date="1599480000">- Add wpe-shm-check.patch: make SHM initialization fail for
  wpebackend-fdo &lt; 1.7.0.</changelog>
  <changelog author="mgorse@suse.com" date="1600084800">- Update to version 2.30.0:
  + Fix NTLM authentication.
  + Don't try to use SHM on wayland with older wpebackend-fdo.
  + Fix the build due to seccomp.h header not found.
  + Security fixes: CVE-2020-9948, CVE-2020-9951.
- Drop seccomp-build-fix.patch and wpe-shm-check.patch: fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1600776000">- Update to version 2.30.1:
  + Bring back the environment variable to force single process
    mode when PSON is disabled.
  + Fix downloads started by an ephemeral web context.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Enable c_loop on aarch64: currently needed for compilation to
  succeed with JIT disabled. Also disable sampling profiler, since
  it conflicts with c_loop (boo#1177087).</changelog>
  <changelog author="dimstar@opensuse.org" date="1603454400">- Update to version 2.30.2:
  + Fix scrolling when smooth scrolling is enabled in async
    scrolling mode.
  + Fix WebSocket requests with same-site cookies.
  + Fix TLS certificate information for service workers.
  + Handle chassis type when its value is quoted.
  + Fix the build with ENABLE_MEDIA_STREAM enabled and
    ENABLE_WEB_RTC_DISABLED.
  + Fix the build with ENABLE_GAMEPAD enabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="4906fceb583e1d49e0e4a81c025086f5942f5d528252f0d5ade26494278bb0dc" name="libjpeg-turbo" arch="aarch64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="ca69cc6532641b4f6b997bd6b6cebe5abe080949c68e2ca5b30d60a676ebc185" name="libjpeg-turbo" arch="ppc64le">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="24092d45253eb97de05d5fb477538d5d36588e0e09e4e7d94cb0d0bbb081c88a" name="libjpeg-turbo" arch="s390x">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="177380bdfbd7a9cdb30385f2cd39cfdafd0241cd40f28cc3f96b1c5d412fe89e" name="libjpeg-turbo" arch="src">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="cf07771f729cb14877617520f72aaa59ba4b90245016b110e8eb9fd5748ef0bf" name="libjpeg-turbo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="e07695c53cb3dc2c76e90c72fe1a10139ab4a4e06548970f0854d0fa4e6ca5ea" name="libjpeg62-32bit" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9c1883e752891c12a80ad8d184cf5eca224f4e1b98c056aa5a815a8a7b9e146e" name="libjpeg62" arch="aarch64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="ae2d089c385252e50b22dc5def92687172916c3ae0f1edeb8340b19969f77324" name="libjpeg62" arch="ppc64le">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="fccb93c51877fb5da7e78f8ed63ac47f0fefa64ee63a0cf2a002c5934f65a2bf" name="libjpeg62" arch="s390x">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9cc15ec927025e8f4cc63b8383b4ee1afd0f1ff515556e30c78e3534f6dd1aa4" name="libjpeg62" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="57bec595f1d5f174f73616a89df9d18d19291a907de656394875e00a71fc9e0c" name="libjpeg62-devel-32bit" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="b9233e3f315e3d8919c966d664111327871a2da5908baa5dc81b24db27f4004d" name="libjpeg62-devel" arch="aarch64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="08101e7f682a02d6c04bb9fc45982a25935b1410d6fe12ffdf9bafaf1f93f1fb" name="libjpeg62-devel" arch="ppc64le">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9c0afd9dbad65ac5fbdf91c318b9bb9512e5b910065e5c0671f230e44d970dc7" name="libjpeg62-devel" arch="s390x">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="efdcb67612ddd0144c99ad491848fff5c2aa05d0fd30159901f68e78705b4836" name="libjpeg62-devel" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="47d33c1074bdcd17a6780666756b57cf4d83e13cd21043b7ff17c8b0d3aa13e6" name="libjpeg62-turbo" arch="aarch64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="bdfc66348b91663ea5e986ca0e60aa3485574a5b2105bf9e69fd5e7e0e58d416" name="libjpeg62-turbo" arch="ppc64le">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="959694507dc4a2d4dadc906fb74b1741c5d0b31814cbe6fe9a1e0bc27e3a7dfa" name="libjpeg62-turbo" arch="s390x">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="88d12001b6fce8780969fb2b1bae62f0ea311243118b8f395e777a69c71ea6a8" name="libjpeg62-turbo" arch="src">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1396267200">-  update to 1.3.1:
  * Fixed a bug whereby attempting to encode a progressive JPEG
    with arithmetic entropy coding (by passing arguments of
  - progressive -arithmetic to cjpeg or jpegtran, for instance)
    would result in an error, "Requested feature was omitted at
    compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  * Fixed an error ("Buffer passed to JPEG library is too small")
    that occurred when calling the TurboJPEG YUV encoding function
    with a very small (&lt; 5x5) source image, and added a unit test
    to check for this error.
  * etc. see ChangeLog.txt</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts</changelog>
  <changelog author="coolo@suse.com" date="1412683200">- to obsolete old versions better use obsoletes</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="938d7b0490dab71fd9c69e36e3a57327991f83734d8f76d5ec3c9d30ed1de725" name="libjpeg62-turbo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3b4f0b876fc193a7e0073b3b9490513b4c3959a9c926e8aa29718d7e26fa5ab0" name="libjpeg8-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="f2ca3676a03073d17fd5843233dc9da6892dd84adb287818247d2edef9a6b532" name="libjpeg8" arch="aarch64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3449992a886a35c051ce9ba101f007c5cd0c581c28053a990a29240fc5500f40" name="libjpeg8" arch="ppc64le">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="4b644e71dd58539c740b9234db20d06e865588f3d461872794fb72d2d865b8cf" name="libjpeg8" arch="s390x">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="977fd8a6b396a049e8746279e65aafa74c94073c4cd5f4edc28a2134cdc8f85e" name="libjpeg8" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="1ac3bde788a413308c1a37cf6f2a06423271ff95d066f733332c0c00e70c7e3c" name="libjpeg8-devel-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="74dca5a8d7ae7e55f3fbd632bd0c32f9a3ed2b57aaac7dfa06d1d10a152ff53d" name="libjpeg8-devel" arch="aarch64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="353df2eccf4a8127679730afa23b428fd7cea1c65fd509f140aa95bd58736955" name="libjpeg8-devel" arch="ppc64le">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="72ef314cbfe284844ae790583c43d8fdeae225a7fe1788213cfaba86b94b994f" name="libjpeg8-devel" arch="s390x">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="0a7c9d6e19f107f296413f5e17bc20fa204a9c7c82525f4ae8cf3d34eed520e1" name="libjpeg8-devel" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="olaf@aepfle.de" date="1413374400">- Obsolete jpeg version 6b, 8.0.1 and 8.0.2 to avoid conflicts
  during zypper dup</changelog>
  <changelog author="pgajdos@suse.com" date="1417089600">- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1420891200">- Update to version 1.4.0
  + Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
    because OS X does not provide the le32toh() and htole32() functions.)
  + The non-SIMD RGB565 color conversion code did not work correctly on big
    endian machines.  This has been fixed.
  + Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
    instead of -1 if componentID was &gt; 0 and subsamp was TJSAMP_GRAY.
  + Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
    instead of -1 if width was &lt; 1.
  + The Huffman encoder now uses clz and bsr instructions for bit counting on
    ARM64 platforms (see 1.4 beta1 [5].)
  + The close() method in the TJCompressor and TJDecompressor Java classes is
    now idempotent.  Previously, that method would call the native tjDestroy()
    function even if the TurboJPEG instance had already been destroyed.  This
    caused an exception to be thrown during finalization, if the close() method had
    already been called.  The exception was caught, but it was still an expensive
    operation.
  + The TurboJPEG API previously generated an error ("Could not determine
    subsampling type for JPEG image") when attempting to decompress grayscale JPEG
    images that were compressed with a sampling factor other than 1 (for instance,
    with 'cjpeg -grayscale -sample 2x2').  Subsampling technically has no meaning
    with grayscale JPEGs, and thus the horizontal and vertical sampling factors
    for such images are ignored by the decompressor.  However, the TurboJPEG API
    was being too rigid and was expecting the sampling factors to be equal to 1
    before it treated the image as a grayscale JPEG.
  + cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
    print the library version and exit.
  + Referring to 1.4 beta1 [15], another extremely rare circumstance was
    discovered under which the Huffman encoder's local buffer can be overrun
    when a buffered destination manager is being used and an
    extremely-high-frequency block (basically junk image data) is being encoded.
    Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
    to address the previous issue, the new issue caused even the larger buffer to
    be overrun.  Further analysis reveals that, in the absolute worst case (such as
    setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
    order), the Huffman encoder can produce encoded blocks that approach double the
    size of the unencoded blocks.  Thus, the Huffman local buffer was increased to
    256 bytes, which should prevent any such issue from re-occurring in the future.
  + The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
    were not actually usable on any platform except OS X and Windows, because
    those functions were not included in the libturbojpeg mapfile.  This has been
    fixed.
  + Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
    files.  The JPP() and JMETHOD() macros were originally implemented in libjpeg
    as a way of supporting non-ANSI compilers that lacked support for prototype
    parameters.  libjpeg-turbo has never supported such compilers, but some
    software packages still use the macros to define their own prototypes.
    Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
    have far symbols, but some software packages still use the FAR macro.  A pretty
    good argument can be made that this is a bad practice on the part of the
    software in question, but since this affects more than one package, it's just
    easier to fix it here.
  + Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
    for iOS, and included an ARMv8 architecture in all of the binaries installed by
    the "official" libjpeg-turbo SDK for OS X.
- Adapt patches to upstream changes
  libjpeg-ocloexec.patch &gt;  libjpeg-1.4.0-ocloexec.patch
  libjpeg-turbo-1.3.0-int32.patch &gt;  libjpeg-turbo-1.4.0-int32.patch
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
- Bump tminor to 1</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1425297600">-  Remove float tests with new libjpeg-turbo-remove-test.patch
  same as Fedora bug 1161585 related to upstream issue
  https://sourceforge.net/p/libjpeg-turbo/bugs/83/</changelog>
  <changelog author="jengelh@inai.de" date="1425556800">- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.</changelog>
  <changelog author="idonmez@suse.com" date="1444305600">- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1465387200">- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program.</changelog>
  <changelog author="idonmez@suse.com" date="1474459200">- Update to version 1.5.1 fate#324061
  + Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.</changelog>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3f9c8ad82508a3c1b4d03473951b6aee1d6023ee2299402ee4dff623560b385a" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="9.56.1"/>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="varkoly@suse.com" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="william.brown@suse.com" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
</package>
<package pkgid="9f2c63886a25e3a3fee3df2fd858d72a861c0b6046d16c5f3d248dcee1f6a235" name="libldap-2_4-2" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="9.56.1"/>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="varkoly@suse.com" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="william.brown@suse.com" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
</package>
<package pkgid="6da3885e574a58f3b7193029837c9050bb82c48b76d9ef4ec835ee7ba1074c6a" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="9.56.1"/>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="varkoly@suse.com" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="william.brown@suse.com" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
</package>
<package pkgid="a1a271e0108ae3974a69103567a874216292a60bd08754984702bc7c3150beb8" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="9.56.1"/>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="varkoly@suse.com" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="william.brown@suse.com" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
</package>
<package pkgid="80969184abdf0849b0b774ce362f7688fec3899219a19d913d9b260735709048" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="9.56.1"/>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="varkoly@suse.com" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="william.brown@suse.com" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
</package>
<package pkgid="e7bd8a1b8a80730656fe79be802ea5544612dcfad174c5a96ea16eaf1a685067" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="9.56.1"/>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1542715200">- Fix CVE-2017-17740: when both the nops module and the memberof
  overlay are enabled, attempts to free a buffer that was allocated
  on the stack
  * patch: 0017-Fix-segfault-in-nops.patch
  (bsc#1073313)</changelog>
  <changelog author="varkoly@suse.com" date="1542801600">- Emergency fix: move tmpfiles_create post from the library package
  to the main package's post script, which ships the tmpfiles.d
  configuration. Fixes the post script of the library (-p
  /sbin/ldconfig does not allow more statements in the script).
- bsc#1111388 openldap and /var/lib/ldap/DB_CONFIG* (transactional-update)
  * source: openldap2.conf
- Added a patch to let slapd return the uniqueness check filter
  used before constraint violation to the client.
  Fixed broken memory handling in affecting error response of slapo-unique
  ITS#8866 slapo-unique to return filter used in diagnostic message
  * patch: 0001-ITS-8866-slapo-unique-to-return-filter-used-in-diagn.patch
- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd.</changelog>
  <changelog author="varkoly@suse.com" date="1555329600">- bsc#1114845 - broken shebang line in openldap_update_modules_path.sh
  - fix the script</changelog>
  <changelog author="william.brown@suse.com" date="1557835200">- bsc#1111388 - incorrect post script call causes tmpfiles create not to
  be run.</changelog>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
</package>
<package pkgid="d678b635fba3350b9c4d3f84fc091376ff965174699635c98cb4941f39041013" name="liblsan0" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6a1f7aa4af742587f70d967a1a9fc01936553824347b979380c515a2a0bd36f1" name="liblsan0" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8852dc405790a1b384d8cb699aa6c8da403cbbbab2fb9ee42ba698ee5ca90c89" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c18368db257c5c56aed69666f44c55aaf048f8b09f527d0a5f50f5b789752706" name="liblua5_3-5-32bit" arch="x86_64">
  <version epoch="0" ver="5.3.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1426420800">- Update to 5.2.4
  * Compiler can optimize away overflow check in table.unpack.
  * Ephemeron table can wrongly collect entry with strong key.
  * Chunk with too many lines may crash Lua.</changelog>
  <changelog author="i@marguerite.su" date="1436529600">- update version 5.3.1
  * integers (64-bit by default)
  * official support for 32-bit numbers
  * bitwise operators
  * basic utf-8 support
  * functions for packing and unpacking values
  * see http://www.lua.org/manual/5.3/readme.html#changes</changelog>
  <changelog author="i@marguerite.su" date="1436788800">- macros.lua installs to lua-devel
- build with LUA_COMPAT_MODULE to compatible w/ old module system</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- Provide Lua(API) = 5.3, so that packages installing files to
  /usr/share/lua/5.3 can properly depend on the right lua branch.
- Provide Lua(devel) = 5.3 by lua-devel and conflict with other
  packages providing Lua(devel) (e.g lua51-devel, lua52-devel...).</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1466078400">- update version 5.3.3
  * bugfix release
- changes in 5.3.2
  * metatable may access its own deallocated field when it has a
    self reference in __newindex
  * label between local definitions can mix-up their initializations
  * gmatch iterator fails when called from a coroutine different
    from the one that created it
- split lua-suse.diff to 3 reasonable patches
  * add lua-5.3.3-prefix.patch
  * add lua-5.3.3-shared.patch
  * add lua-5.3.3-visible.patch</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Let package description adhere to guidelines: trim redundant
  or biased wording and strip future goals.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Add patch lua-build-system.patch for all the builsystem changes
- Drop patches merged to the above:
  * lua-5.3.3-prefix.patch
  * lua-5.3.3-shared.patch
- Drop not really needed lua-5.3.3-visible.patch
- Version update to lua 5.3.4 containing various bugfixes
- Rename to lua53</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- Require lua macros rather than bundling them with lua itself</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Properly set includedir in the .pc file</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Add INSTALL_LMOD and INSTALL_CMOD variables to lua53.pc: this is
  queried for example by rrdtool's buildsystem.</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Provide symbol for pkgconfig</changelog>
  <changelog author="mcepl@suse.com" date="1552392000">- Update to 5.3.5:
  (it is really problematic to find ANY documentation of changes
  between minor versions; the best we have is
  https://www.lua.org/bugs.html)
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - Small build tweaks.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Added upstream-bugs.patch: upstream bug patches
  * Patches 2,3,4
- Added upstream-bugs-backport-lua54.patch: bugs discovered in lua54
  * Patch 10: CVE-2020-24371, boo#1175449
  * Patch 11: CVE-2020-24370, boo#1175448
  * Patch 13
- Add RISC-V to list of 64-bit architectures</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1601035200">- Update to version 5.3.6:
  * Fixes bugs found in Lua 5.3.5 and Lua 5.4.0
  * Lua 5.3 is now EOL
- Removed upstream-bugs.patch: new release (no bugs found yet)
- Removed upstream-bugs-backport-lua54.patch: new release (no bugs found yet)</changelog>
  <changelog author="mcepl@suse.com" date="1622548800">- Sync with Factory (5.3.6), includes fixes for
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - bsc#1123043 CVE-2019-6706 Fix free-after-use bug in
    lua_upvaluejoin function of lapi.c
- Remove upstreamed patches:
  - CVE-2019-6706-use-after-free-lua_upvaluejoin.patch</changelog>
</package>
<package pkgid="aef51c6230edcbd7626a9ae2d57610ca92f8978fbe42779d5462cf7dd69d1d45" name="liblua5_3-5" arch="aarch64">
  <version epoch="0" ver="5.3.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1426420800">- Update to 5.2.4
  * Compiler can optimize away overflow check in table.unpack.
  * Ephemeron table can wrongly collect entry with strong key.
  * Chunk with too many lines may crash Lua.</changelog>
  <changelog author="i@marguerite.su" date="1436529600">- update version 5.3.1
  * integers (64-bit by default)
  * official support for 32-bit numbers
  * bitwise operators
  * basic utf-8 support
  * functions for packing and unpacking values
  * see http://www.lua.org/manual/5.3/readme.html#changes</changelog>
  <changelog author="i@marguerite.su" date="1436788800">- macros.lua installs to lua-devel
- build with LUA_COMPAT_MODULE to compatible w/ old module system</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- Provide Lua(API) = 5.3, so that packages installing files to
  /usr/share/lua/5.3 can properly depend on the right lua branch.
- Provide Lua(devel) = 5.3 by lua-devel and conflict with other
  packages providing Lua(devel) (e.g lua51-devel, lua52-devel...).</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1466078400">- update version 5.3.3
  * bugfix release
- changes in 5.3.2
  * metatable may access its own deallocated field when it has a
    self reference in __newindex
  * label between local definitions can mix-up their initializations
  * gmatch iterator fails when called from a coroutine different
    from the one that created it
- split lua-suse.diff to 3 reasonable patches
  * add lua-5.3.3-prefix.patch
  * add lua-5.3.3-shared.patch
  * add lua-5.3.3-visible.patch</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Let package description adhere to guidelines: trim redundant
  or biased wording and strip future goals.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Add patch lua-build-system.patch for all the builsystem changes
- Drop patches merged to the above:
  * lua-5.3.3-prefix.patch
  * lua-5.3.3-shared.patch
- Drop not really needed lua-5.3.3-visible.patch
- Version update to lua 5.3.4 containing various bugfixes
- Rename to lua53</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- Require lua macros rather than bundling them with lua itself</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Properly set includedir in the .pc file</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Add INSTALL_LMOD and INSTALL_CMOD variables to lua53.pc: this is
  queried for example by rrdtool's buildsystem.</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Provide symbol for pkgconfig</changelog>
  <changelog author="mcepl@suse.com" date="1552392000">- Update to 5.3.5:
  (it is really problematic to find ANY documentation of changes
  between minor versions; the best we have is
  https://www.lua.org/bugs.html)
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - Small build tweaks.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Added upstream-bugs.patch: upstream bug patches
  * Patches 2,3,4
- Added upstream-bugs-backport-lua54.patch: bugs discovered in lua54
  * Patch 10: CVE-2020-24371, boo#1175449
  * Patch 11: CVE-2020-24370, boo#1175448
  * Patch 13
- Add RISC-V to list of 64-bit architectures</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1601035200">- Update to version 5.3.6:
  * Fixes bugs found in Lua 5.3.5 and Lua 5.4.0
  * Lua 5.3 is now EOL
- Removed upstream-bugs.patch: new release (no bugs found yet)
- Removed upstream-bugs-backport-lua54.patch: new release (no bugs found yet)</changelog>
  <changelog author="mcepl@suse.com" date="1622548800">- Sync with Factory (5.3.6), includes fixes for
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - bsc#1123043 CVE-2019-6706 Fix free-after-use bug in
    lua_upvaluejoin function of lapi.c
- Remove upstreamed patches:
  - CVE-2019-6706-use-after-free-lua_upvaluejoin.patch</changelog>
</package>
<package pkgid="2829830566a49695913146a001ef6dcf255f605111290b6032f3a3586f3c3245" name="liblua5_3-5" arch="ppc64le">
  <version epoch="0" ver="5.3.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1426420800">- Update to 5.2.4
  * Compiler can optimize away overflow check in table.unpack.
  * Ephemeron table can wrongly collect entry with strong key.
  * Chunk with too many lines may crash Lua.</changelog>
  <changelog author="i@marguerite.su" date="1436529600">- update version 5.3.1
  * integers (64-bit by default)
  * official support for 32-bit numbers
  * bitwise operators
  * basic utf-8 support
  * functions for packing and unpacking values
  * see http://www.lua.org/manual/5.3/readme.html#changes</changelog>
  <changelog author="i@marguerite.su" date="1436788800">- macros.lua installs to lua-devel
- build with LUA_COMPAT_MODULE to compatible w/ old module system</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- Provide Lua(API) = 5.3, so that packages installing files to
  /usr/share/lua/5.3 can properly depend on the right lua branch.
- Provide Lua(devel) = 5.3 by lua-devel and conflict with other
  packages providing Lua(devel) (e.g lua51-devel, lua52-devel...).</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1466078400">- update version 5.3.3
  * bugfix release
- changes in 5.3.2
  * metatable may access its own deallocated field when it has a
    self reference in __newindex
  * label between local definitions can mix-up their initializations
  * gmatch iterator fails when called from a coroutine different
    from the one that created it
- split lua-suse.diff to 3 reasonable patches
  * add lua-5.3.3-prefix.patch
  * add lua-5.3.3-shared.patch
  * add lua-5.3.3-visible.patch</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Let package description adhere to guidelines: trim redundant
  or biased wording and strip future goals.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Add patch lua-build-system.patch for all the builsystem changes
- Drop patches merged to the above:
  * lua-5.3.3-prefix.patch
  * lua-5.3.3-shared.patch
- Drop not really needed lua-5.3.3-visible.patch
- Version update to lua 5.3.4 containing various bugfixes
- Rename to lua53</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- Require lua macros rather than bundling them with lua itself</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Properly set includedir in the .pc file</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Add INSTALL_LMOD and INSTALL_CMOD variables to lua53.pc: this is
  queried for example by rrdtool's buildsystem.</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Provide symbol for pkgconfig</changelog>
  <changelog author="mcepl@suse.com" date="1552392000">- Update to 5.3.5:
  (it is really problematic to find ANY documentation of changes
  between minor versions; the best we have is
  https://www.lua.org/bugs.html)
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - Small build tweaks.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Added upstream-bugs.patch: upstream bug patches
  * Patches 2,3,4
- Added upstream-bugs-backport-lua54.patch: bugs discovered in lua54
  * Patch 10: CVE-2020-24371, boo#1175449
  * Patch 11: CVE-2020-24370, boo#1175448
  * Patch 13
- Add RISC-V to list of 64-bit architectures</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1601035200">- Update to version 5.3.6:
  * Fixes bugs found in Lua 5.3.5 and Lua 5.4.0
  * Lua 5.3 is now EOL
- Removed upstream-bugs.patch: new release (no bugs found yet)
- Removed upstream-bugs-backport-lua54.patch: new release (no bugs found yet)</changelog>
  <changelog author="mcepl@suse.com" date="1622548800">- Sync with Factory (5.3.6), includes fixes for
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - bsc#1123043 CVE-2019-6706 Fix free-after-use bug in
    lua_upvaluejoin function of lapi.c
- Remove upstreamed patches:
  - CVE-2019-6706-use-after-free-lua_upvaluejoin.patch</changelog>
</package>
<package pkgid="8fd470739e552f6ac5c5eb973f0e2ab8854c4988cc34a64da9e1761f8d9e65b3" name="liblua5_3-5" arch="s390x">
  <version epoch="0" ver="5.3.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1426420800">- Update to 5.2.4
  * Compiler can optimize away overflow check in table.unpack.
  * Ephemeron table can wrongly collect entry with strong key.
  * Chunk with too many lines may crash Lua.</changelog>
  <changelog author="i@marguerite.su" date="1436529600">- update version 5.3.1
  * integers (64-bit by default)
  * official support for 32-bit numbers
  * bitwise operators
  * basic utf-8 support
  * functions for packing and unpacking values
  * see http://www.lua.org/manual/5.3/readme.html#changes</changelog>
  <changelog author="i@marguerite.su" date="1436788800">- macros.lua installs to lua-devel
- build with LUA_COMPAT_MODULE to compatible w/ old module system</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- Provide Lua(API) = 5.3, so that packages installing files to
  /usr/share/lua/5.3 can properly depend on the right lua branch.
- Provide Lua(devel) = 5.3 by lua-devel and conflict with other
  packages providing Lua(devel) (e.g lua51-devel, lua52-devel...).</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1466078400">- update version 5.3.3
  * bugfix release
- changes in 5.3.2
  * metatable may access its own deallocated field when it has a
    self reference in __newindex
  * label between local definitions can mix-up their initializations
  * gmatch iterator fails when called from a coroutine different
    from the one that created it
- split lua-suse.diff to 3 reasonable patches
  * add lua-5.3.3-prefix.patch
  * add lua-5.3.3-shared.patch
  * add lua-5.3.3-visible.patch</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Let package description adhere to guidelines: trim redundant
  or biased wording and strip future goals.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Add patch lua-build-system.patch for all the builsystem changes
- Drop patches merged to the above:
  * lua-5.3.3-prefix.patch
  * lua-5.3.3-shared.patch
- Drop not really needed lua-5.3.3-visible.patch
- Version update to lua 5.3.4 containing various bugfixes
- Rename to lua53</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- Require lua macros rather than bundling them with lua itself</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Properly set includedir in the .pc file</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Add INSTALL_LMOD and INSTALL_CMOD variables to lua53.pc: this is
  queried for example by rrdtool's buildsystem.</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Provide symbol for pkgconfig</changelog>
  <changelog author="mcepl@suse.com" date="1552392000">- Update to 5.3.5:
  (it is really problematic to find ANY documentation of changes
  between minor versions; the best we have is
  https://www.lua.org/bugs.html)
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - Small build tweaks.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Added upstream-bugs.patch: upstream bug patches
  * Patches 2,3,4
- Added upstream-bugs-backport-lua54.patch: bugs discovered in lua54
  * Patch 10: CVE-2020-24371, boo#1175449
  * Patch 11: CVE-2020-24370, boo#1175448
  * Patch 13
- Add RISC-V to list of 64-bit architectures</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1601035200">- Update to version 5.3.6:
  * Fixes bugs found in Lua 5.3.5 and Lua 5.4.0
  * Lua 5.3 is now EOL
- Removed upstream-bugs.patch: new release (no bugs found yet)
- Removed upstream-bugs-backport-lua54.patch: new release (no bugs found yet)</changelog>
  <changelog author="mcepl@suse.com" date="1622548800">- Sync with Factory (5.3.6), includes fixes for
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - bsc#1123043 CVE-2019-6706 Fix free-after-use bug in
    lua_upvaluejoin function of lapi.c
- Remove upstreamed patches:
  - CVE-2019-6706-use-after-free-lua_upvaluejoin.patch</changelog>
</package>
<package pkgid="10ad6de12b5e117fc0f2d0420f53aed18b68ffcf8b26a8b356b79745d1356c74" name="liblua5_3-5" arch="x86_64">
  <version epoch="0" ver="5.3.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1426420800">- Update to 5.2.4
  * Compiler can optimize away overflow check in table.unpack.
  * Ephemeron table can wrongly collect entry with strong key.
  * Chunk with too many lines may crash Lua.</changelog>
  <changelog author="i@marguerite.su" date="1436529600">- update version 5.3.1
  * integers (64-bit by default)
  * official support for 32-bit numbers
  * bitwise operators
  * basic utf-8 support
  * functions for packing and unpacking values
  * see http://www.lua.org/manual/5.3/readme.html#changes</changelog>
  <changelog author="i@marguerite.su" date="1436788800">- macros.lua installs to lua-devel
- build with LUA_COMPAT_MODULE to compatible w/ old module system</changelog>
  <changelog author="dimstar@opensuse.org" date="1438257600">- Provide Lua(API) = 5.3, so that packages installing files to
  /usr/share/lua/5.3 can properly depend on the right lua branch.
- Provide Lua(devel) = 5.3 by lua-devel and conflict with other
  packages providing Lua(devel) (e.g lua51-devel, lua52-devel...).</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1466078400">- update version 5.3.3
  * bugfix release
- changes in 5.3.2
  * metatable may access its own deallocated field when it has a
    self reference in __newindex
  * label between local definitions can mix-up their initializations
  * gmatch iterator fails when called from a coroutine different
    from the one that created it
- split lua-suse.diff to 3 reasonable patches
  * add lua-5.3.3-prefix.patch
  * add lua-5.3.3-shared.patch
  * add lua-5.3.3-visible.patch</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Let package description adhere to guidelines: trim redundant
  or biased wording and strip future goals.</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Add patch lua-build-system.patch for all the builsystem changes
- Drop patches merged to the above:
  * lua-5.3.3-prefix.patch
  * lua-5.3.3-shared.patch
- Drop not really needed lua-5.3.3-visible.patch
- Version update to lua 5.3.4 containing various bugfixes
- Rename to lua53</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- Require lua macros rather than bundling them with lua itself</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Properly set includedir in the .pc file</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Add INSTALL_LMOD and INSTALL_CMOD variables to lua53.pc: this is
  queried for example by rrdtool's buildsystem.</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Provide symbol for pkgconfig</changelog>
  <changelog author="mcepl@suse.com" date="1552392000">- Update to 5.3.5:
  (it is really problematic to find ANY documentation of changes
  between minor versions; the best we have is
  https://www.lua.org/bugs.html)
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - Small build tweaks.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Added upstream-bugs.patch: upstream bug patches
  * Patches 2,3,4
- Added upstream-bugs-backport-lua54.patch: bugs discovered in lua54
  * Patch 10: CVE-2020-24371, boo#1175449
  * Patch 11: CVE-2020-24370, boo#1175448
  * Patch 13
- Add RISC-V to list of 64-bit architectures</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1601035200">- Update to version 5.3.6:
  * Fixes bugs found in Lua 5.3.5 and Lua 5.4.0
  * Lua 5.3 is now EOL
- Removed upstream-bugs.patch: new release (no bugs found yet)
- Removed upstream-bugs-backport-lua54.patch: new release (no bugs found yet)</changelog>
  <changelog author="mcepl@suse.com" date="1622548800">- Sync with Factory (5.3.6), includes fixes for
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - bsc#1123043 CVE-2019-6706 Fix free-after-use bug in
    lua_upvaluejoin function of lapi.c
- Remove upstreamed patches:
  - CVE-2019-6706-use-after-free-lua_upvaluejoin.patch</changelog>
</package>
<package pkgid="0e48d65259492a81eae9d3351812dbaeb92a30c9fa6f3c69d21cfdf412a8decc" name="liblvm2cmd2_03" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="8521c5fe5f991baa74b9e36d27c5586ba0449dc4645f957897c5a0241c2472ed" name="liblvm2cmd2_03" arch="ppc64le">
  <version epoch="0" ver="2.03.05" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="39ea950798d3378f39bd8e554c82e901c747b9e924693fd24cc6d6fee43c6f2b" name="liblvm2cmd2_03" arch="s390x">
  <version epoch="0" ver="2.03.05" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="721d4a8fb7a35958094fc2761fb4baaaefbdc0fabc8d7b513b703f3d51572e34" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="8.33.1"/>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
</package>
<package pkgid="13b2825466f87d8427efc02a5e1ffffba475776bdac625c0d3084f5f0f124c22" name="liblz4-1" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="6f4b14d80590d5004767cfd2620e01717b24c279b75020fde699d9754e57ce15" name="liblz4-1" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="8d0c47e9a5de6d902331149181fb436ed7faa8d2c3c7f1419ddeef0a61d47f14" name="liblz4-1" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="4eb891b5e57fe711b6f97e9279ca5dabb035ac721473f147a5cc55116ce4eea8" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="03c63b5701ba81b94ab8beb226abf40baeb37f3aa902b829e9ea86e25efce13f" name="liblz4-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="fc7a24ff252e7c6f71d2ded9344039901bffc8dcb58ccd93d3bfd9a2714d59f7" name="liblz4-devel" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="59af788cb1bad9600cd5f9dbde0de17df038de798458b2508def2b42886d8cb7" name="liblz4-devel" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0c78926f84a15820d38b0a24da510cd50ecb5113ec9fb618db41a09bc29bea52" name="liblz4-devel" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="2b231c2e3ccb66d80ae3072dd83c8a52e9a2605d06b3abdccc5824b1a8b6b5a9" name="liblz4-devel" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0b319746418edde875b6819829e712914a0daf2c94bca3d9a5d821da05de3f45" name="libmariadb-devel" arch="aarch64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="0fd1460dd2aeffc6dc42d5240d4c6e33e485370798d424765280229610cca8e9" name="libmariadb-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="776a4795a03ea3e990ab8fe8971b4236553aa8ee4040282273dacb5fcecfcfdb" name="libmariadb-devel" arch="s390x">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="c76919c4f2739cf007cf188e51c3b9c18fb4cc559223b84d9d0d238ec4c10748" name="libmariadb-devel" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="36988bad24b9cac6923cc7f7e5d9d439a448aca8ffd12a0266f20a43aeda4561" name="libmariadb3" arch="aarch64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="7a57b6b36d0ec0d3adce7719dad2ceeb19b7ecca3fa31490939ede4c4aad6936" name="libmariadb3" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="c9f5d1af23d91126ea65bfa05a52791a281156c33423a0c584a1f5f284544756" name="libmariadb3" arch="s390x">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="ca978a0f6aba1251ced5b3c24f4dac8a239e410c8548bf05c6e7c2ae22a103b8" name="libmariadb3" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="215c36d55c42f0a6cafbec9c3ed2106da54dcc12100ce00e2d493600e961a078" name="libmariadb3-32bit" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="e700738e09cbe909097a7be06b350a5055ac515e9b666c02fdf2a1551c5aae94" name="libmariadb_plugins" arch="aarch64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="951ff6bf260ca5122ed29dc02c639dcd548ecfdd3cfe99936a435603eb401a27" name="libmariadb_plugins" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="22699b1afe3909098e94f692a7a6d500e6bfc6d0f0098151fe8aabc1c99a6f5a" name="libmariadb_plugins" arch="s390x">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="6bd299e0d1f9b310e2d3f53508ec881829649d4cd64df47cbe0799e9048a24f1" name="libmariadb_plugins" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="e4b99841e071bb41ea8bc8ddc198cd64ec3d4bb78699f5d18bafe6300d77aafc" name="libmariadbprivate" arch="aarch64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="4d3aea1a0a93847dac1cdddf99c39d37a8b834dc9e593dffa2dd58bb0363c62f" name="libmariadbprivate" arch="ppc64le">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="0855a7d08a671c1a2aaf809d3f9c5f3a590099686e07561c03f58866829f4349" name="libmariadbprivate" arch="s390x">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="becc6cdf94093587625a2c5eb66722f656689a520d8d1766588bf017c629baa5" name="libmariadbprivate" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="3.30.1"/>
  <changelog author="kstreitova@suse.com" date="1503403200">- New upstream version 3.0.2
  * Array support for prepared statements (bulk operations)
  * TLS/SSL support for GnuTLS, Windows SChannel and LibreSSL
  * Support for passphrase protected keys
  * SHA256 authentication plugin
- refreshed
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- change sover from 2 to 3
- tweak build options
  * DMYSQL_UNIX_ADDR is now DMARIADB_UNIX_ADDR
  * DPLUGIN_INSTALL_DIR is now DINSTALL_PLUGINDIR
  * add DINSTALL_LIBDIR, WITH_MYSQLCOMPAT and DWITH_SSL
- now we build also the following plugins:
  * auth_gssapi_client.so
  * remote_io.so
  * sha256_password.so
- move libmysqlclient* libraries to %{_libdir}</changelog>
  <changelog author="kstreitova@suse.com" date="1505390400">- add README and COPYING.LIB to %doc</changelog>
  <changelog author="kstreitova@suse.com" date="1506686400">- move libraries to %{_libdir}/mariadb/ to avoid a conflict</changelog>
  <changelog author="kstreitova@suse.com" date="1509624000">- mariadb-connector-c is now a provider of the libmariadb library
  for mariadb and others
- add compatibility symlinks
- change LIBDIR, INCLUDEDIR and PLUGINDIR paths to be the same as
  it was in the mariadb package (compatibility reasons)
- add baselibs.conf
- add %{mariadb_version} macro that should correspond with the
  current version of the mariadb package
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Install missing header (bsc#1067904)</changelog>
  <changelog author="adam.majer@suse.de" date="1510920000">- 0334aa48.patch: Backported implementation and testcase for
  skipping particular paramset in bulk operation/. This is needed
  to get current stable MariaDB connector/ODBC actually compilable.</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524139200">- New upstream version 3.0.3
  * Added support for new utf8mb4 character sets
  * MDEV-9059: Bundle first command with authentication packet
  * Build: support static OpenSSL on Windows
  * MDEV-14101: Add support for tls-version, via
    mysql_options(mysql, MARIADB_OPT_TLS_VERSION, value),
    where value must be "TLSv1.1", "TLSv1.2" or "TLSv1.3".
  * CONC-275: New indicator type STMT_INDICATOR_IGNORE_ROW for
    skipping particular parameter set in bulk operation
    (prepared statements).
  * MDEV-10361: Don't try to reconnect twice if mysql_ping failed.
  * Build fix for TSAN build with Clang
  * CONC-302: Fix output of mariadb_config
  * CONC-301: In case of a truncation the statement status was not
    updated correctly and further calls to mysql_stmt_fetch_column
    failed
  * MDEV-14647: Fixed crash when client receives extended ok packet
    with SESSION_TRACK_STATE_CHANGE information flag
  * CONC-297: setting MYSQL_OPT_LOCAL_INFILE failed on big endian
    systems.
  * MDEV-14514: mariadb_config returned wrong exit code when
    specifying an invalid option
  * MDEV-11546: Fixed timeout problem in Schannel
  * CONC-277: Allow reinitialization of the library if
    mysql_server_end() was called.
  * CONC-292: Fixed malloc result check in dynamic columns
  * MDEV-14165: The metadata length value for a column with a
    zerofill flag was calculated with a fixed length instead of using
    the reported length.
  * CONC-286: Force TLS/SSL usage if fingerprint parameters were
    specified.
  * CONC-282: Connector/C now provides additional information for
    package version
  * mariadb_config --cc_version lists the package version
  * Beside MARIADB_PACKAGE_VERSION numeric representation
    MARIADB_PACKAGE_VERSION_ID can be used now within preprocessor
    directives.
  * MDEV-13959: Fixed duplicate if condition in dynamic columns
  * Added MARIADB_BASE_VERSION definition in mariadb_version.h to
    distnguish MARIADB from MySQL
  * CONC-271: installation layout fix for RPM
- refresh the following patches:
  * absolute_path_fix.patch
  * private_library.patch
- drop 0334aa48.patch that is no longer needed
- use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1543924800">- New upstream version 3.0.7 [bsc#1116686]
- 3.0.7
  * Build fixes when building with ASAN/TSAN
  * CONC-370: Fixed memory leak in configuration file parsing.
  * CONC-371: Incorrect fractional part conversion when converting
    datetime string to MYSQL_TIME
  * CONC-283: Fixed pkg-config configuration
  * CONC-364: Not all sockets created in pvio_socket_connect
    function are closed
  * multiple fixes in named pipe implementation
  * CONC-349: Added new parameter STMT_ATTR_STATE to retrieve
    statement status via api function mysql_stmt_attr_get
- 3.0.6
  * MDEV-15263: FIx IS_NUM() macro
  * CONC-297: local infile parameter must be unsigned int instead
    of my_bool
  * CONC-329: change return value of internal socket functions
    from my_bool to int
  * CONC-332: my_auth doesn't read/update server ok packet
  * CONC-344: reset internal row counter
  * CONC-345: invalid heap use after free
  * CONC-346: Remove old cmake policies
  * fixed crash in mysql_select_db if NULL parameter was provided
- 3.0.5
  * CONC-336: Allow multiple initialization of client library
  * Fixed string to MYSQL_TIME conversion (prepared statements)
  * CONC-334: Copy all members of MYSQL_FIELD to internal
    statement structure
  * Fixed double free in dynamic column library
  * Added checks for corrupted packets in protocol
  * MDEV-15450: Added default connection attribute _server_host
  * CONC-326: fixed wrong openssl thread id callback
- 3.0.4
  * Added option MYSQL_OPT_CAN_HANDLE_EXPIRED_PASSWORDS for
    mysql_options()/mysql_optionsv():
  * New plugin configuration interface: The default configuration
    for a specific plugin can be specified via cmake parameter
  - DCLIENT_PLUGIN_${PLUGIN}=[DYNAMIC|STATIC|OFF].
  * Added support for linux abstract socket (MDEV-15655).
  * CONC-320: Added asynchronous/non-blocking support for
    OpenSSL and GnuTLS
  * CONC-294: Access violation in mysql_close when using
    a connection plugin.
  * MDEV-14977: If built dynamically the old_password plugin
    could not be located due to wrong filename (must be
    mysql_old_password.so instead of old_password.so).
  * CONC-315: If no default client character set was specified,
    the utf8 character set will be used by default (instead of
    setting the client character set to server character set)
  * CONC-317: Parsing of configuration file fails if key/value
    pairs contain white spaces.
  * CONC-322: Correct handling of EAGAIN and EINPROGRESS in
    internal_connect (socket) for non windows platforms.
  * CONC-323: mariadb_stmt_execute_direct hangs forever if
    compression used.
  * CONC-324: Wrong codepage numbers for some collations.
  * CONC-326: ssl_thread_init() uses wrong openssl threadid
    callback
- refresh the following patches:
  * mariadb-connector-c-2.3.1_unresolved_symbols.patch
  * absolute_path_fix.patch
  * private_library.patch
- pack libmariadb.pc
- drop libmysqlclient_r Provides from the -devel package.
  (bsc#1097938)</changelog>
  <changelog author="kstreitova@suse.com" date="1551441600">- move libmariadb.pc from /usr/lib/pkgconfig to
  /usr/lib64/pkgconfig [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1562155200">- New upstream version 3.1.2 [bsc#1136035]
  * CONC-383: client plugins can't be loaded due to missing prefix
  * Fixed version setting in GnuTLS by moving "NORMAL" at the end
    of priority string
  * CONC-386: Added support for pem files which contain certificate
    and private key.
  * Replication/Binlog API: The main mechanism used in replication
    is the binary log.
  * CONC-395: Dashes and underscores are not interchangeable in
    options in my.cnf
  * CONC-384: Incorrect packet when a connection attribute name or
    value is equal to or greater than 251
  * CONC-388: field-&gt;def_length is always set to 0
  * Getter should get and the setter should set
    CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS
  * Disable LOAD DATA LOCAL INFILE suport by default and auto-enable
    it for the duration of one query, if the query string starts with
    the word "load". In all other cases the application should enable
    LOAD DATA LOCAL INFILE support explicitly.
  * Changed return code for mysql_optionv/mysql_get_optionv to 1 (was -1)
    and added CR_NOT_IMPLEMENTED error message if a option is unknown
    or not supported.
  * mingw fix: use lowercase names for include files
  * CONC-375: Fixed handshake errors when mixing TLSv1.3 cipher
    suites with cipher suites from other TLS protocols
  * CONC-312: Added new caching_sha2_password authentication plugin
    for authentication with MySQL 8.0
- refresh mariadb-connector-c-2.3.1_unresolved_symbols.patch and
  private_library.patch
- pack caching_sha2_password.so and client_ed25519.so
- use DINSTALL_PCDIR for libmariadb.pc [bsc#1126088]</changelog>
  <changelog author="kstreitova@suse.com" date="1574942400">- New upstream version 3.1.5 [bsc#1156669]
  * MDEV-20469: Plugin dialog could not be loaded (wrong path)
  * ODBC-440: Fixed typo in sha256_password cmake configuration
  * CONC-418: For unknown/not handled schannel error codes
    FormatMessage function will be used instead of returning
    "Unknown error" message.
  * CONC-431: Use windows crypto libraries on Windows platforms
  * CONC-380: Fix CMake warnings
  * CONC-345: heap-use-after-free in client_mpvio_read_packet
  * CONC-423: Fix GnuTLS error with TLSv1.3
  * CONC-424: Ignore SERVER_STATUS_CURSOR_EXISTS if client didn't
    open a cursor before
  * CONC-421: Fixed crash in GnuTLS when key and certificate are
    in the same file
  * CONC-429: Don't allow invalid characters in plugin names
  * MDEV-19807: Fixed Location of PLUGINDIR if Connector/C is a
    subproject
- refresh absolute_path_fix.patch, private_library.patch and
  mariadb-connector-c-2.3.1_unresolved_symbols.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1582027200">- Update to release 3.1.7 [bsc#1162388]
  * TLS/SSL: when the client doesn't procide a CA file and the
    option ssl_verify_server_cert was set, the peer cerificate
    will be validated against the system CA.
- Update to release 3.1.6
  * Fixed: ERROR 2026 (HY000): SSL connection error: Certificate
    signature check failed
  * Fixed: Provide error code and message for Schannel errors
  * Fixed SEC_E_INVALID_TOKEN when server sends large message
    during SSL handshake</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to release 3.1.8 [bsc#1171550]
  * CONC-304: Rename the static library to libmariadb.a and other
    libmariadb files in a consistent manner
  * CONC-441: Default user name for C/C is wrong if login user
    is different from effective user
  * CONC-449: Check $MARIADB_HOME/my.cnf in addition to
    $MYSQL_HOME/my.cnf
  * CONC-457: mysql_list_processes crashes in unpack_fields
  * CONC-458: mysql_get_timeout_value crashes when used improperly
  * CONC-464: Fix static build for auth_gssapi_client plugin
  * Fixes for the following security vulnerabilities:
    CVE-2020-13249
- refresh absolute_path_fix.patch and private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1598356800">- Update to release 3.1.9 [bsc#1175596]
  * CONC-469: Use servers preferred authentication method unless
    another plugin was specified.
  * Added support for kFreeBSD builds
  * Fixed memory leak in GnuTLS if connection couldn't be established.
- refresh private_library.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to release 3.1.11: [bsc#1177472] and [bsc#1178428]
  * CONC-513: MSAN use-of-uninitialized-value in strstr()
  * CONC-512: truncation check for float values fails on i386 due
  * to Intel FPU optimization bug in gcc
  * CONC-510: Fix crash when loading plugins in mysql_server_init()
  * CONC-508: Added support for passwords &gt; 255 characters
  * CONC-507: Fixed race condition in ma_net_init
  * CONC-501: Added support for TLS v1.3 cipher suites
  * MDEV-21612: Removed unused command COM_MULTI
- changes in release 3.1.10:
  * CONC-500: Fixed error when loading intermediate chained certificates
  * MDEV-18818: Fixed wrong zlib in mariadb_config when building
    inside server package
  * CONC-498: MYSQL_UNIX_ADDR and MYSQL_PORT are now defined
  * Added new build option WIITH_ICONV=ON/OFF. When set to OFF (default)
    API function mariadb_convert_string will always return -1 and
    sets errorcode to ENOTSUP.
  * mariadb_config now tries to determine the path of execution or
    uses MARIADB_CONFIG environment variable before falling back and
    using CMAKE_INSTALL_PREFIX for location of libraries and include files
  * added --variables option for mariadb_config.
    Supported values are pkgincludedir, pkglibdir and pkgplugindir.
- add %{_includedir}/mariadb -&gt; %{_includedir}/mysql symlink
- absolute_path_fix.patch, private_library.patch: refreshed</changelog>
  <changelog author="kstreitova@suse.com" date="1614772800">- Update to release 3.1.12 [bsc#1182739]:
  * MDEV-24577: Fix warnings generated during compilation of
    plugin/auth_pam/testing/pam_mariadb_mtr.c on FreeBSD
  * CONC-521: Fixed warning on MacOS when including ucontext.h
  * CONC-518: Check if mysql-&gt;options.extension was allocated before
    checking async_context
  * CONC-517: C/C looks for plugins in wrong location on Windows</changelog>
  <changelog author="kstreitova@suse.com" date="1622116800">- Update to release 3.1.13 [bsc#1185870], [bsc#1185872], [bsc#1185868]
  * CONC-537: Only read from MYSQL_HOME if MARIADB_HOME was not set
  * CONC-548: Symbol conflict with libsodium
  * CONC-490: Handshake error when CLIENT_CONNECT_WITH_DB flag was
    set without specifying database
  * CONC-543: Hash functions conflict with GnuTLS
  * CONC-539: Added cipher suites ECDHE-RSA-AES128-SHA256 (0xC027)
    and ECDHE-RSA-AES256-SHA384 (0xC028) to the cipher map which
    maps cipher suite names to the corresponding algorithm ids
    (Windows Schannel)
  * CONC-535: Disabled checksum ignored in events (replication/
    binlog API)</changelog>
  <changelog author="kstreitova@suse.com" date="1622116801">- set INSTALL_LAYOUT=RPM and adjust libdir, includedir, plugindir
  and pcdir values to fix mariadb_config output. Also fix the
  missing "%s" in private_library.patch so it shows the correct
  path for plugindir [bsc#1179921] [bsc#1183878]</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- drop absolute_path_fix.patch: obsolete after previous change
  (properly setting INSTALL_LAYOUT and libdir) [bsc#1187459]</changelog>
</package>
<package pkgid="43c4bf0d174b0e45112414f226c05021ba01e93ce8ca631024ae52159f2126c6" name="libmodplug-devel" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="5fbc3022b9656b5b6c8d423a07e2f6afeb8ec148ffdfc25d860cf8c6ce2e82cf" name="libmodplug-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="87ed47fbd81f1c23c2e9abac3a7012cdec01d6ff091c82b1d060b76a8bf2faf0" name="libmodplug-devel" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="402a3ecdde30a1551cbc340f872a446fdccfc52229af241889f52587b82e1aeb" name="libmodplug-devel" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="dc42c61deb4ff7709b6103beacaeb7b64c072081861c004f00f95b43be79514d" name="libmodplug1" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="91fb021dd2791e7ce2cc265ab58606b2d9c8ecc261fa2ef82c86f7a30d702dba" name="libmodplug1" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="d4306b1ede094d4064e5484d1373f1e398a3f823d66c92d3f5bcdff0e15f4506" name="libmodplug1" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="dd7300057e991ae3a68f2bd60936f41a6e0adf107b6c6533ee8ca68a195a0003" name="libmodplug1" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="d151f96d2d5138b6d44045bb53a360adcc5871dd5e89ee94e6d4a724f491f9d2" name="libmodplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="759283fda743606c16d0ce5c2d512388066ea8d5710808e56c24c7ab037297d5" name="libmpath0" arch="aarch64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="602646c03e82bf0a065611476447ba3ed4c2bf15579923e14cb71bb9a1b7d680" name="libmpath0" arch="ppc64le">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="5cc286687b1d78768b20cbb23d5e9094ca10a4335a6024b620c3fa1ea78cf823" name="libmpath0" arch="s390x">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="a62babd71c31ab43a100d85d827ac7ed64dcf90e06520915d06d6b624203fc59" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.8.5+80+suse.73c50f5" rel="3.3.1"/>
  <changelog author="mwilck@suse.com" date="1589198400">- Update to version 0.8.4+29+suse.c27ed8d:
  * multipath-tools: Makefile.inc: set -Wno-error=clobbered
  * Makefile.inc: keep warning flags during rpm build
  * Eliminate compiler warnings on 32bit build.
  * Fixes for tests under i586
- Spec file: add %check section to run multipath-tools CI
  * not on SLE12, as cmocka is missing
  * add build dependency on cmocka for building tests
  * run "make test" with parallel make</changelog>
  <changelog author="mwilck@suse.com" date="1589284800">- Update to version 0.8.4+31+suse.8f53764:
  * Fix sporadic build failures caused by missing build dependencies</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Update to version 0.8.4+40+suse.b06c2e5a:
- Fix udev rule processing during coldplug (bsc#1172157)
  * 11-dm-mpath.rules: Fix udev rule processing during coldplug
- Fix compilation with gcc-10
  * fix boolean value with json-c 0.14
  * libmultipath: fix condlog NULL argument in uevent_get_env_var
- Reviewed upstream changes:
  * simplify failed_wwid code
  * centralize path validation code
- Use pkgconfig for BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1591790400">- Update to version 0.8.4+43+suse.908383f:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'</changelog>
  <changelog author="mwilck@suse.com" date="1597924800">- Update to version 0.8.4+167+suse.70bef90:
  Pull in reviewed upstream changes
- Bug fixes
  * libmultipath: add consistency check for alias settings (bsc#1172429)
  * libmultipath: select_action(): don't drop map if alias clashes (bsc#1172429)
  * libmultipath: refuse reloading an existing map with different WWID
    (bsc#1172429)
  * libmultipath: select_action(): force udev reload for uninitialized maps
    (bsc#1172157)
  * multipathd: uev_trigger(): handle incomplete ADD events (bsc#1172157)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * libmultipath: add device to hwtable.c (bsc#1174026) (ETERNUS AHB)
- New features
  * multipath: add -D option to skip multipathd delegation
  * multipath: delegate flushing maps to multipathd
  * multipathd: add "del maps" multipathd command
- Other changes
  * cleanup disassemble_map() code path (bsc#1178377, bsc#1178379)
  * multipath-tools: introduce INIT_REMOVED state
  * logging improvements
  * fix "multipathd show devices"
  * libmultipath: remove uevent listener failback
  * libmultipath: create bitfield abstraction
  * libmultipath: count pending paths as active on loads
  * kpartx: handle alternate bsd disklabel location
- Lots of minor fixes and cleanups
- Spec file: use %service_del_postun_without_restart macro</changelog>
  <changelog author="mwilck@suse.com" date="1598011200">- Update to version 0.8.4+170+suse.801341f:
  * libmultipath: tests: fix bitfield tests
  * Spec file: disable LTO for %check (bsc#1133122)</changelog>
  <changelog author="mwilck@suse.com" date="1598443200">- Update to version 0.8.4+180+suse.50a2698:
  * Fix memory access / leak issues found with valgrind</changelog>
  <changelog author="mwilck@suse.com" date="1598529600">- Update to version 0.8.4+183+suse.1817ce2:
  Added reviewed upstream fix for multipath crash
  * multipath: get_dm_mpvec: discard broken maps</changelog>
  <changelog author="mwilck@suse.com" date="1599739200">- Missing past changelog bug references:
  * 0.7.3+10+suse.70ccb55b0439:
  Patch series for NVMe discovery and failover (bsc#1038865,
  bsc#1057820)
  * 0.7.9+109+suse.203c1cf
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1600257600">- Update to version 0.8.4+190+suse.fe234ea:
  * Fixes for daemon shutdown issues from  SLE(bsc#1110060, bsc#1110439)
  - multipathd: allow shutdown during configure()
  * fix compilation of external programs with -lmultipath
  (bsc#1133957, necessary after the above fix)
  * Minor upstream fixes</changelog>
  <changelog author="mwilck@suse.com" date="1600257601">- Update to version 0.8.4+192+suse.1bc10ad:
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="bcc19257262da130c903fe9859d09f13a386ac4d68b45792a87a85d57b5793bb" name="libnetcontrol-devel" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="489b409f580559d398887cb05949a9d02fbc8e050e6fb6fe4e8eb7a19b7ada57" name="libnetcontrol-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="711316570378cf97fa54bd7a002226bea0366dd43610218c3a88a47af3df1dd7" name="libnetcontrol-devel" arch="s390x">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="fbb09a1b8dde719ccfa61c3e7ec638a838b42601f301d56d654c3bd2b18e8a0c" name="libnetcontrol-devel" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="d4941edca00f60263926f5d3dcf04f817e7733fa102b63445be34304f11de60e" name="libnetcontrol0" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="fa4dcac05e65f0a483f19bf58ab6dc9c8ec7b65f9c96c3446aebfda31de8c63d" name="libnetcontrol0" arch="ppc64le">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="d0d781a2e328765221c7651e343449051f2ab446df140953d7acfc8568726ef5" name="libnetcontrol0" arch="s390x">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="bc09a9bc3f2c41caacab8e095ce2d3a4297a94c3b307970a88264d2d968b547c" name="libnetcontrol0" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="7925e755f331a1e5cecbb36e53665d1c606cbc7eb9a442bca9c90bde6cc8b6c5" name="libnetcontrol0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="5033492b6c639fadf770438801bdbc32054b1e624135b85cd12958a48a052746" name="libnettle" arch="src">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="tchvatal@suse.com" date="1399982400">- Cleanup with spec-cleaner
- Paralelize test run</changelog>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="3f984e58ea596733f7df0773a7d7ea824ef3db827d18752adebbe209a2a8d753" name="libnettle-devel" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="066d398f0a7c1f68fb0ff90046d6de7e19a42a676807414711814521cd7dc91e" name="libnettle-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="3866f6bf04b73fa6e55484e0e4d3d9ecbb5fa4dd92a7d63d39b7a7d73c150043" name="libnettle-devel" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="302bd6c6a1230ccea361952a2a8830b061b6ba12ae9c122fba83ff087030809f" name="libnettle-devel" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="6ddeece6ae84e9ecf7e5882a09f4caa9e9496e0bb94c5410fc26c4a70b37c04a" name="libnettle-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="55593f0b3a7e4e58af39f101607e9ca3a7f3dc1220fad2422d3d05ada61e652e" name="libnettle6" arch="aarch64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="87fa26f979f0ed1557c517a0ca6e059efdc22215f347bab9645362bbd8c4447c" name="libnettle6" arch="ppc64le">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="de9ed69946711a099132a3e5de607378479dccee33675fca97abc4fb929c09ae" name="libnettle6" arch="s390x">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="57e909dfcde4ceb1e5bc723225ce2b244cd99b99f5020efaf60c22b3d09094e9" name="libnettle6" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="4bf04f1a39124ec9000f459b22c9e3812e0bcf5ba93c5c7a9888d0701ba155aa" name="libnettle6-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="mpluskal@suse.com" date="1425556800">- Revert back to 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Add url to the spec</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- nettle 3.1 (libnettle6, libhogweed4)
- bug fixes in 3.1:
  * Fixed a missing include of &lt;limits.h&gt;, which made the camellia
    implementation fail on all 64-bit non-x86 platforms.
  * Eliminate out-of-bounds reads in the C implementation of memxor
  (related to valgrind's --partial-loads-ok flag). [bso#926745)
- interface changes in 3.1:
  * Declarations of many internal functions are moved from ecc.h to
    ecc-internal.h.
- interface changes in 3.0:
  * contains developer relevant incompatible interface changes
- Removed features:
  * nettle_next_prime, use GMP's mpz_nextprime
  * Deleted the RSAREF compatibility
- New features in 3.1:
  * Support for curve25519 and for EdDSA25519 signatures.
  * Support for "fat builds" on x86_64 and arm (not enabled)
  * Support for building the hogweed library (public key support)
    using "mini-gmp" (not enabled)
  * The shared libraries are now built with versioned symbols.
  * Support for "URL-safe" base64 encoding and decoding
- New features in 3.0:
  * new DSA, AES, Camellia interfaces
  * Support for Poly1305-AES MAC.
  * Support for the ChaCha stream cipher and EXPERIMENTAL
    support for the ChaCha-Poly1305 AEAD mode.
  * Support for EAX mode.
  * Support for CCM mode.
  * Additional variants of SHA512 with output size of 224 and 256 bits
  * New interface, struct nettle_aead, for mechanisms providing
    authenticated encryption with associated data (AEAD).
  * DSA: Support a wider range for the size of q and a wider
    range for the digest size.
  * New command line tool nettle-pbkdf2.
- Optimizations in 3.1:
  * New x86_64 implementation of AES, using the "aesni" instructions
- Optimizations in 3.0:
  * New x86_64 assembly for GCM and MD5. Modest speedups on the
    order of 10%-20%.</changelog>
  <changelog author="vpereira@suse.com" date="1429790400">added patch: off-by-one-test-suite.patch
- Address Sanitizer, found a off-by-one error in the test suite (bnc#928328)</changelog>
  <changelog author="astieger@suse.com" date="1430049600">- nettle 3.1.1
  Non-critical bugfix release, binary compatible to 3.1
  * By accident, nettle-3.1 disabled the assembly code for the
    secp_224r1 and secp_521r1 elliptic curves on all x86_64
    configurations, making signature operations on those curves
    10%-30% slower. This code is now re-enabled.
  * The x86_64 assembly implementation of gcm hashing has been
    fixed to work with the Sun/Oracle assembler.</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Remove off-by-one-test-suite.patch as it was fixed by upstream
  differently</changelog>
  <changelog author="tchvatal@suse.com" date="1453982400">- Version update to 3.2 release bnc#964849 CVE-2015-8805 bnc#964847
  CVE-2015-8804 bnc#964845 CVE-2015-8803:
  * New functions for RSA private key operations, identified by
    the "_tr" suffix, with better resistance to side channel
    attacks and to hardware or software failures which could
    break the CRT optimization
  * SHA3 implementation is updated according to the FIPS 202 standard
  * New ARM Neon implementation of the chacha stream cipher
  * Should be compatible binary with 3.1 series
- Add patch to fix build with cflags:
  * nettle-respect-cflags.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1456228800">- Fix postun-&gt;preun on info packages regenerating</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- libnettle 3.3:
  * Invalid private RSA keys, with an even modulo, are now
    rejected by rsa_private_key_prepare. (Earlier versions
    allowed such keys, even if results of using them were bogus).
    Nettle applications are required to call
    rsa_private_key_prepare and check the return value, before
    using any other RSA private key functions; failing to do so
    may result in crashes for invalid private keys.
  * Ignore bit 255 of the x coordinate of the input point to
    curve25519_mul, as required by RFC 7748. To differentiate at
    compile time, curve25519.h defines the constant
    NETTLE_CURVE25519_RFC7748.
  * RSA and DSA now use side-channel silent modular
    exponentiation, to defend against attacks on the private key
    from evil processes sharing the same processor cache. This
    attack scenario is of particular relevance when running an
    HTTPS server on a virtual machine, where you don't know who
    you share the cache hardware with.
    bsc#991464 CVE-2016-6489
  * Fix sexp-conv crashes on invalid input
  * Fix out-of-bounds read in des_weak_p
  * Fix a couple of formally undefined shift operations
  * Fix compilation with c89
  * New function memeql_sec, for side-channel silent comparison
    of two memory areas.
  * Building the public key support of nettle now requires GMP
    version 5.0 or later (unless --enable-mini-gmp is used).</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="1ba5b17f7196ef99e3c85a0da0e2ad5c98cdca770bc68db93056cec97361359d" name="libnfsidmap-sss" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="9f45986578a6af051d27a93e13e664a1fdf75c9a7b587870e02c11bc705e752f" name="libnfsidmap-sss" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="a92df78799f9a4f10dc0ff0c803ed3f185478b0ac6afd7b060b5215fd824c915" name="libnfsidmap-sss" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="64b5184aa40a4f02b330a9b09b24e48d8426366388d2ab3a70b12d9777d6a547" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="23.8.1"/>
  <changelog author="scabrero@suse.de" date="1553083200">- Rotate child debug file descriptors on SIGHUP (bsc#1080156)
- Added patches:
  * 0006-Rotate-child-log-files.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557316800">- Create directory to download and cache GPOs (bsc#1132879)
- Add a netgroup counter to struct nss_enum_index (bsc#1132657)
- Added patches:
  * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch</changelog>
  <changelog author="scabrero@suse.de" date="1558612800">- Allow defaults sudoRole without sudoUser attribute (bsc#1135247)
- Added an option to skip GPOs that have groupPolicyContainers,
  unreadable by SSSD (bsc#1124194) (CVE-2018-16838)
- Added patches:
  * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch</changelog>
  <changelog author="scabrero@suse.de" date="1562241600">- Fix memory leak in nss netgroup enumeration (bsc#1139247);
- Added patches:
  * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745600">- Fix login not possible when email address is duplicated in ldap
  attributes (bsc#1149597)
- Added patches:
  * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  * 0014-util-Remove-the-unused-function-is_email_from_domain.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745601">- Fix domain offline after first boot when resolv.conf is a symlink
  (bsc#1136139)
- Added patches:
  * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch</changelog>
  <changelog author="scabrero@suse.de" date="1571745602">- Delete linked local user overrides when deleting a user
  (bsc#1133168)
- Added patches:
  * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch</changelog>
  <changelog author="scabrero@suse.de" date="1573041600">- Update winbind idmap plugin to support interface version 6
  (jsc#SLE-9819)
- Added patches:
  * 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  * 0020-winbind-idmap-plugin-fix-detection.patch
  * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576238400">- Fix building with newer samba versions (bsc#1137876)
- Added patches:
  * 0027-utils-make-N_ELEMENTS-public.patch
  * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch</changelog>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
</package>
<package pkgid="813cea01550bc2d64c8e460411fb6ae6636fa207a29703cf683c4ae7323a444f" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="b07e5736daa4eedf212cf55ec7c716ad699088d57bc59f48e1618c4b060dc2cc" name="libnghttp2-14" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="ec741818419c75d1ae6a7b7dc0a1e48ae58769d441f651c9c6b33ec7e54b4c9b" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="a763c3ad6b01b86ce376a13a50c6844653e0d0ddb3643a21e38b9d377a76b415" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="90c0e4637d814289199944782636a13242b5c593e1506400c0523e41af77decc" name="libnghttp2-14-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="ed8ac3f2476bc09e33655698dce6298b6543dae981ad086a6e6d4ea4a9138f70" name="libnghttp2-devel" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="f0ddb1dd795c6b52291bbb2d5ac24a0a71169c5e428cb5a4c0a289f0b953c1f5" name="libnghttp2-devel" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="3b6e2ddf34f9cd2c3eb20b61844693172366473c86f72bca5a17142edeb01db4" name="libnghttp2-devel" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="cbbc9ffc9cb4fdbd82f75092af0998fb6351a1f8f266e62ddb1a07d27e52e73c" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="9771f104de01f90a4b389f4c778505e2458dc7ae943501894fe5cae0e37ae9a8" name="libnghttp2_asio-devel" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="594cdc338f54584b8d42df24af18997eb0b671e167565617904145197eea2e51" name="libnghttp2_asio-devel" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="cad58659b3f2f533681ad7d1e6f39216ef76541e4232518a5f3465e0924db941" name="libnghttp2_asio-devel" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="aa8018601c84342e38b1f60ddaca1433cbd979a176fe9ad2fcad2e648744ac3e" name="libnghttp2_asio-devel" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2334a7d6aaaf434c08157fc93b70eb70be65be54008c2895c52122993121bf6c" name="libnghttp2_asio1" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="fc14573f1c10f266de58983472036ebb594a35c44db5f013f15afa79c06d57e2" name="libnghttp2_asio1" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="498bb796cc70337157ee307dcc84014632fdb6da68cd4549a3dfa85064085f69" name="libnghttp2_asio1" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="58c46cb394a1e1186aba990a619495380c87f89c2cbcfa9e64e06cde22816300" name="libnghttp2_asio1" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="7bcb7eea67991dbfacddc7ede0b7e2f216f3add2bea99122eebe089cb0cb0f1d" name="libnghttp2_asio1-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1512561600">- Upodate to version 1.28.0:
  * lib: Add nghttp2_error_callback2
  * build: Add deprecation warning when spdylay support is enabled
  * Switch to clang-format-5.0
  * examples: Make client and server work with libevent-2.1.8
  * third-party: Update neverbleed
  * integration: Fix issues reported by the go vet tool.
  * nghttpx: Fix affinity retry
  * nghttpx: Fix stalled backend connection on retry
  * nghttpx: Cookie based session affinity
  * nghttpx: Expose additional TLS related variables to mruby and
    accesslog</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2d73681615b4eaa0676ce0fabcec2c9d300e1b410aa7f14168a18fe90cf95e82" name="libns1604" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="080220206a918eadd41820e5b741cf501cf4cd5792dec81cad8755de89e5b433" name="libns1604" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4f2db141980e84fef3feae8af3faf8e3a8033c6fed3f9af53ccb9264b160c01c" name="libns1604" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="1f083172c6e786e9f8505aa20ee0f6afbc02b32389623173ce2e03c2faf0e702" name="libns1604" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="kukuk@suse.com" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="kukuk@suse.com" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="josef.moellers@suse.com" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b4c27b1a7104e259a47f85ddea267200e3f03ba192ccad610d57169fb589e151" name="libnuma-devel" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="db79c118fbc1313736dbdc567ad72bd5faf19b16683abe09371e8a568d3f923c" name="libnuma-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="f03b4eb662c08e73364d26de886a576a39bb646bbbfd8e998a1295366fc884c5" name="libnuma-devel" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="6131b2e98938dd643baf486be3bdfedff609fcd9578fe0f41f06209789a96fbb" name="libnuma-devel" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="9cc6796b6864bcd80f2f156ae93806a5944e927e398efbd3320d7c3b5459af04" name="libnuma1" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="cb45d59daefc85fe74ed4fe653aee2f61b90e62850dd4cfc8330471aad629122" name="libnuma1" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="3e298d2d8dab38fe515c5e63dce07d08f820bb09efd28d30c6d307ca59a00768" name="libnuma1" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="d2c8fff9e8557d5b083593846c090e42f245b51f92ed669252ddbb51a75dabfd" name="libnuma1" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="69983e24f21e604be1d5639be47fb41a1372ff95725750e7ba9763f7d8c8168e" name="libnuma1-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="mailaender@opensuse.org" date="1416657600">- Update to version 2.0.10:
  * 131123 numactl: numactl check for NUMA available (Elena Ufimtseva)
  * 140715 numactl: fix numactl --show  and preferrred node (Bill Gray)
  * 140722 makefile: remove warning about missing .depend (Filipe Brandenburger)
  * 140820 convert the build procedure to automake (Filipe Brandenburger)
- Cleanup spec file
  * use RPM macros where possible
  * remove redundant %clean</changelog>
  <changelog author="meissner@suse.com" date="1417089600">- cleanup, also build for i586
- remove move_pages.2 , as it is in manual-pages rpm.</changelog>
  <changelog author="trenn@suse.de" date="1421755200">- Make latest factory version build against SLE11 as well</changelog>
  <changelog author="trenn@suse.de" date="1422360000">- Change license from GPL-2.0+ to GPL-2.0</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424692800">- package fails to build with PIE globally enabled, due to
  error: inconsistent operand constraints in an 'asm'.
  Turns out there is a GCC builtin for doing the operation
  cleanly. (numactl-clearcache-pie.patch)</changelog>
  <changelog author="mpluskal@suse.com" date="1438516800">- Cleanup spec file with spec-cleaner
- Use autoreconf to update configure</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.0.11
  * 150116 libnuma: numa_node_to_cpu skips over non-existing
    nodes (Petr Holasek)
  * 151210 libnuma: supress warnings for non-existing node (Petr Holasek)</changelog>
  <changelog author="fschnizlein@suse.com" date="1499428800">- Update to latest HEAD (ea3a70681c2f523fe58e1d44527f478ca76db74e)
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Fix usage of __GLIBC_PREREQ for non-glibc toolchains
  * Clean up numa_error() calls.
  * Handle sched_getaffinity() failing with errno != EINVAL.
  * "Further more" should be a single word
  * Fix for numa_police_memory()
  * Segment fault when numa nodes not sequential or contiguous
  * Update prototype of get_mempolicy</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="b3bb636e415c6038ece1a68a42a1f06041c49ffb02be9ef85478a25a86c82a0c" name="libobjc4" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="492a4841c01123132849f1efaf76d14e3a77d0a9ae00d013946f3bc3aa77b78b" name="libobjc4" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="60f247d00c948be2bc8d227a4e6e83764e0ceb2d5aad7ab7fcea184cc7e31b91" name="libobjc4" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1832beb53d551458f2989a71291ab7e7ba4ff95d0623513b8d94c94b469570d2" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9ca0d8c8e28e722712e894779094557d502c3da79f87517836098d80b45aaa66" name="libobjc4-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3266c6419aa4a53e1aa0af463cd1aafef238173a6ca38ca4a80a98c01a7aac5c" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fbe2ac087ab6fb3b023464fe290f0bb12d25b61dd92018dae7d8b155e349e3a9" name="libopenmpt" arch="src">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="05ebea860e50d6fd423af5a905263835e742431ef05d662ac87bce84b95d898d" name="libopenmpt-devel" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="a4efc02a199f110250ecd8fbe1af3f8195eaf07de44ddc27e43a69182ce57d40" name="libopenmpt-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="194f841816feb7a7a44697641333cc27a7358ae26cc1761aa51cfb60c58a3672" name="libopenmpt-devel" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="4be1430b5ee125aa443c84d375f52b085210649f7615af550112763663597eb1" name="libopenmpt-devel" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="8b4820da50532ed62bd7baded7876db90f8611c8808454cf3f5e6f4916ab5680" name="libopenmpt0" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="86223a2569cf03d97b8cfe6bb4276795c3d29dc671d792328adc006740f4f4c9" name="libopenmpt0" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="574e314549b49efcf8ba903b466b5412b09985765a57208195da33e91458fb79" name="libopenmpt0" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="ed907e3f4606236f61ff2a9572863f50ba0a9181ae9534200cc0cadf6f998225" name="libopenmpt0" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="b0b84b6c06b7d9c0cd0d7062cc8847c33f3a20d45b56701a67466b1eacffab6f" name="libopenmpt0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="191c8c86c5495d85e036d3b12d4efcfd697fafbe783256e06b3f1dfc89082c10" name="libopenmpt_modplug1" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="2ec973dde622571ef968874702d752b7a66cadd583dceaba91b6a8b56040c2a6" name="libopenmpt_modplug1" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="f7afbadc2a386c8920acd7dab93ea38797c74479b6a6aefff58d3f1eb15534e4" name="libopenmpt_modplug1" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="ff64cb1c4df0266a37daa40fe320ec31d7d2410141148799cd8882111a94d6ab" name="libopenmpt_modplug1" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="49d68177c58115d8f748ea2d4961390e51c9c0917ff02067259eb149bfe7c1bd" name="libopenmpt_modplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="860f1237a37afee1947763d5c1a427e2bdf48290876bfa29a8398993d04e04d2" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2ddd3841babb6acfdd2ed69d2d7214ee3b59d398c3bdc9502c49175a38555f16" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="82e0aeb846333306855d7037e12c7711f23f622703e9bd12504a4ef6a62ab909" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d51449fe53becd13359c64ca3ecbe209547cfc19686f253561bbcda4113fa188" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="7a846f10903dc50e93c1367fa4ce83137201e9803e1dd6a0c320cc6ae071f853" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="e92894a8514c76c28af7d56e1d27d21193850df5e61d2bec452b2b45558f570f" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="6ce634c50dc7a4c3a7a79ff2258627074ec49acae7ed30942dc2c8230d2a21d1" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="d272aff4bd88035d1e7ff8bb1ce77457b85d621b4b63d50aec1d8c05214eb20d" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="9f94c02c1f7f0af34c967395a41d7568c77b593f55ee5617f99ec6c983b16d9b" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ff713f7e48feda4201493269ada4a3aae505c56c379b1b19b8916435ca9529c3" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b93aa6c1e2af44e9881780d113cdd8de3e7be1af74fece14d2e2dfc08c90ae43" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2b91ad98979a85f4802603ee4d18a783664fe14ae76158f0668a547147294a0d" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1598356800">- Update to version 2.0.4+20200702.813fdbfdc:
- libcrmcommon: deprecate create_hello_message() as public API (bsc#1170346, rh#1796824)
- pacemakerd: properly conditionalize corosync calls (bsc#1170346, rh#1796824)
- pacemakerd: use existing handle for corosync shutdown (bsc#1170346, rh#1796824)
- pacemakerd: improve messages (bsc#1170346, rh#1796824)
- pacemakerd: functionize removing core file limit (bsc#1170346, rh#1796824)
- pacemakerd: remove unneeded IPC and CPG commands (bsc#1170346, rh#1796824)
- tools: crm_node -l and -p now work from Pacemaker Remote nodes (bsc#1170346, rh#1796824)
- functionize numeric comparisons of strings (bsc#1170346, rh#1796824)
- controller: add new IPC API command for getting node list (bsc#1170346, rh#1796824)</changelog>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="043ec0388ba8aa1a94f18cecf4fad211e788d1f72b16c4079c53a51a0c87bb51" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="67826107fe15c1fe48274bf486395f92d7ab2cae38ec7ff7334d8ef13192a2b8" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="bd4668f6965d91f9b7f004da004e5f9350d641d4580cbe724139efc54528f1eb" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="727f9882c0e6a3c342f441bfbcc592c6c28eb227ca74b0ef5e1deaaab50724eb" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.6.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- Update to version 2.0.4+20200819.114974685:
- controld: Log correct timeout for timed-out stonith monitor
- libpe_status: Use pcmk_monitor_timeout as stonith start timeout (rh#1856015)
- crm_mon: Displays completed failed actions as processed.
- libpe_status: Support integer as rule type attribute
- libpe_status: Error-check and expand range of type="number"
- xml: Support integer as rule type attribute
- daemons, lib, tools: Correct comparisons to string functions.
- libcrmcommon: Allow default formatted output message handlers.
- tools: Apply resource filtering to bans.
- tools: Apply resource filtering to --brief option.
- libpe_status: Allow filtering bundled resources.
- libpe_status: Allow filtering cloned resources.
- libpe_status: Allow filtering resource groups.
- libpe_status: Allow filtering primitive resources.
- tools: Add "No active resources" to one case in crm_mon output.
- tools: Allow filtering node history by resource.
- tools: Add --resource= to the crm_mon command line.
- cluster: Close corosync handles when they disconnect (rh#1614166)
- libcrmcommon: Use truly implicit deny for ACLs (rh#1833173)
- libpe_status: Destroy hash table after use
- controld: improve message indicating the RA execution request
- tools: Convert crm_resource to use glib for command line handling.
- Allow logfile perms to be set in sysconfig
- pacemakerd: improve logging when synced with SBD
- pacemakerd: interworking with sbd not using pacemakerd-api
- tools: Add -P to crmadmin to ping via pacemakerd-api
- sbd-integration: sync pacemakerd with sbd
- executor: only send executor notifications to executor clients
- ipc-api: avoid infinite loop when disconnected
- ipc-api: allow calling connect after disconnection
- fencer: don't log assertion if unable to create full request reply
- libcrmcommon: avoid assertion on controller protocol errors
- tools: Add the http-equiv header to crm_mon at the right time.
- tools, libcrmcommon: Reopen the output dest on reset.
- libcrmcommon: Make reset and finish work more similarly. (rh#1857728)
- libcib: Update known_paths
- tools: Update valid scope values for cibadmin --help
- controld: Show action timer plus cluster-delay in action_timer cb (rh#1856035)
- Rebase:
  * bug-943295_pacemaker-lrmd-log-notice.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- Update to version 2.0.4+20200819.643f19b71:
- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- Update to version 2.0.4+20200820.216d5db57:
- tools: properly detect local node name
- various: improve client flag handling
-Rebase:
  * bug-806256_pacemaker-log-level-notice.patch
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059202">- Update to version 2.0.4+20200820.09f345c49:
- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)</changelog>
  <changelog author="ygao@suse.com" date="1604059203">- Update to version 2.0.4+20201014.b0ef36d82:
- cibsecret: read value to set from input (or stdin) if not specified
- libcrmcommon: Don't leak memory in pcmk__cmdline_preproc.
- tools: Don't leak options.xml_file in crm_simulate.
- tools: Prevent a potential memory problem in crm_resource.
- tools: Use glib for cmdline handling in crmadmin.
- tools: Apply resource filtering to failed actions in crm_mon.
- scheduler: require pre-/post-start notifications correctly
- tools: avoid memory leak if crm_mon --include/--exclude have bad syntax
- pacemakerd: change one message so CTS recognizes it
- libcrmcommon: check controller API object for NULL
- fencer: properly deactivate stonith API callbacks
- controld: Avoiding Broken pipe when shutdown.
- Stateful: add ability to return custom rc saved in state file
- Dummy: add ability to return custom rc saved in state file
- Use effective OCF rc-code to avoid increasing failcount for DEGRADED statuses
- tools: Don't display crm_resource error messages twice.
- Accept PCMK_OCF_DEGRADED and PCMK_OCF_DEGRADED_MASTER status codes
- libcrmservice: avoid dangling reference after DBus memory allocation error
- libcrmservice: avoid double logging an error
- libcrmservice: improve DBus log messages
- fenced: Avoiding Broken pipe when shutdown.
- controld: Avoiding Broken pipe when shutdown.
- attrd: Avoiding Broken pipe when shutdown.
- Dont add OCF_RESKEY_ prefix to OCF_CHECK_LEVEL
- controller: recognize reprobe requests correctly again
- tools: allow crm_resource --option to be specified multiple times again
- tools: only create validate parameters table when needed
- tools: use glib types/free in crm_resource where appropriate to GOption
- xml: Add a new schema version for crm_mon.
- scheduler: Display stop-all-resources in cluster options.
- scheduler: Add management status to group output. (rh#1748139)
- scheduler: Change output for disabled clones. (rh#1748139)
- scheduler: Change output for disabled groups. (rh#1748139)
- scheduler: don't select instance to be promoted on a guest that can't run
- fenced: Set the delegate correctly when fencing fails.
- scheduler: improve messages when creating actions
- libcrmcommon: Warn instead of err in scan_ll() (rh#1874391)
- libcrmcommon: Don't always write out a name attribute.
- scheduler, tools: Add a resource-list message.
- Rebase:
  * bug-728579_pacemaker-stonith-dev-id.patch</changelog>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.4+20201019.878658661:
- cib: create reply when needed for diff
- cib: only build reply when needed</changelog>
  <changelog author="ygao@suse.com" date="1607256001">- Update to version 2.0.4+20201022.354625c62:
- tools: revert some changes in crm_resource NULL checks
- xml: Mark new crm_mon attributes as optional.
- scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set</changelog>
  <changelog author="ygao@suse.com" date="1607256002">- Update to version 2.0.4+20201027.31aa4f551:
- pacemakerd: handle shutdown requests better
- daemons,libcrmcommon: send status code with client acks
- fencer: restrict certain IPC requests to privileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: ignore shutdown requests from unprivileged users (CVE-2020-25654, bsc#1177916)
- pacemakerd: check client for NULL before using it
- executor: restrict certain IPC requests to Pacemaker daemons (CVE-2020-25654, bsc#1177916)
- executor: return appropriate error code when no remote support
- executor: mark controller connections to pacemaker-remoted as privileged
- executor: show CRM_OP_REGISTER rc in debug message</changelog>
  <changelog author="ygao@suse.com" date="1607256003">- Update to version 2.0.4+20201116.ae2c04b54:
- tools: make cibsecret use bash
- fencer: allow peer configuration requests</changelog>
  <changelog author="ygao@suse.com" date="1607256004">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
  <changelog author="jguilhermevanz@suse.com" date="1624017600">- controld: purge attrd attributes when the remote node is up to ensure sync with CIB (bsc#1186693)
  * bsc#1186693-clean-attrd-attributes-when-remote-node-is-up.patch</changelog>
</package>
<package pkgid="21140c6023bec332dac7dc3f167f6aefb0ef08f82c6fd56393313e6ae5adc544" name="libpcre1-32bit" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="027fd3a63db29155fb8ee5228afacf8ef5be34fe47088b324dcefc669a4a6e7d" name="libpcre1" arch="aarch64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="6d911e313ab8eec907babcdf371a142d041003bffae9b2ef4557afd6b4443892" name="libpcre1" arch="ppc64le">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="d8446c6e3e76bf0d7afe001401bd5845d7f8eb54ae4c65f881644b474d91d035" name="libpcre1" arch="s390x">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="5bed44a49ef0cc22881d216ccbe20fe34abdb45b9768f8345c9a7fe14de53f33" name="libpcre1" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="95cdb1173dce8634b7f3bee047742a8b8856bb0d3961450e8670aa923605c124" name="libpcre16-0-32bit" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="0579155e5999229f2e45a0ac186701d671860a3cf217bf47b0f6514c5696b4d6" name="libpcre16-0" arch="aarch64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="130df9358b8d7117929b5f67bfeec987cfbadfc94dd81f2d41a2349b9a07d5ff" name="libpcre16-0" arch="ppc64le">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="5c6dface091524df1f7695acde8203b1a78c7b665df0a10a8c098a93e52ae5c5" name="libpcre16-0" arch="s390x">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="b0c2acee52cd0eae70339a8cb5d391d2742a9649bc657201308becab480a1c79" name="libpcre16-0" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="2c6b44b5de420665a1e9f334621308a663b30eec1b7f5e280f2538664b33c9a6" name="libpcrecpp0-32bit" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="c10a1ae0ce7f0fa16c80a59812bd6cb08d2d7b31138f3bc0893621e72bb5e577" name="libpcrecpp0" arch="aarch64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="c490072cce0dab503941cc1770b9054642257b113abd512951c480de006294fe" name="libpcrecpp0" arch="ppc64le">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="981a7b7783720140e39a3fd3ae4fe0675305a393555926bbce74aad35649c9ad" name="libpcrecpp0" arch="s390x">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="3c4a3e63ae9173fde7db162deb8c363ed70f6885dd1eb4ecb20e1858ea2d2dab" name="libpcrecpp0" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="b258cbedb9fd70815abb89ec64693b0bb60df2df79fcb2e7b2f056570016c627" name="libpcreposix0-32bit" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="f53debabdd8db67f93947a0410f2a8389d49f61af1713e66bd8a4a84108d5021" name="libpcreposix0" arch="aarch64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="d1038411b0c3784f39fed24ad62a588cfe8fd0635ac3137af809d34f6ca3c549" name="libpcreposix0" arch="ppc64le">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="407c198e41a8ca2aa3a537c97aec159019b81282b368eccac34fb19174b36505" name="libpcreposix0" arch="s390x">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="f3d88d93af38c944b9efec1f08e77daac782a2c5fefc598ece44b8fd991869ec" name="libpcreposix0" arch="x86_64">
  <version epoch="0" ver="8.41" rel="6.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1448539200">- pcre 8.38:
  * CVE-2015-3217: Call Stack Overflow Vulnerability in match()
    bsc#933878
  * Other fixes to assertions, crashes, buffer overflows and
    performance issues found by fuzzer, affecting applications
    accepting regular expression from untrusted sources</changelog>
  <changelog author="mpluskal@suse.com" date="1465992000">- Update to version 8.39:
  * Some appropriate PCRE2 JIT improvements have been retro-fitted
    to PCRE1.
  * CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)
  * CVE-2016-1283: Heap buffer overflow DoS (boo#960837)
  * Apart from that, this is another bug-fix release.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
</package>
<package pkgid="7b195aa49d53792437a8100fe8dc9ec0ae697dff04593d22683bd6d3ebddca1c" name="libpipewire-0_3-0" arch="aarch64">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="7161b05d5b09fea7f6fbc8e31df69ccb1d3577c19c54c458d73afdc96f22c70a" name="libpipewire-0_3-0" arch="ppc64le">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="573f60b0bb6669bd0e69ef1326961250480382b3408b0c86d588749c0270497d" name="libpipewire-0_3-0" arch="s390x">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="16768e30c9f457a9a8fc8bd174d4dfc2af2d32232d7c91f6ef1de1c9523e9a37" name="libpipewire-0_3-0" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="a000eb2f47ecf8c8fce9c42cca71f7c8e92cf33d3ec8aa2f24a9a68db9d1f3fd" name="libpipewire-0_3-0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.24" rel="4.3.1"/>
  <changelog author="alarrosa@suse.com" date="1611144000">- Update to version 0.3.20:
  + Highlights
  - Latency was reduced in ALSA and PulseAudio and time
    reporting has improved a lot.
  - Bluetooth now has a native HFP backed, SBC XQ and
    mSBC support.
  - Many bugfixes and improvements, improved device
    support.
  + PipeWire improvements
  - pw-dump can now dump all objects such as Endpoints
  - pw-dump has a -m option to monitor changes
  - pw-dump can now dump metadata
  - pw-stream can now use the rate-match io to exactly
    produce the required number of samples for the
    current cycle. When using this feature, a stream can
    achieve the same low-latency as pw-filter.
  - spa-acp-tool can now load a custom profile-set and
    correctly parses the volume updates
  - There is now a nofail option when loading modules
  - The connection has been made reentrant to fix some
    strange random problems with metadata.
  - Turn some errors into warnings or simply info.
  - Executables are now built with PIE
  - S24OE formats should work now (MAudio FastTrack Pro)
  - Remove mlock warnings. Add support for mlockall with
    a config option.
  + Session-manager
  - There are now config files for bluez and v4l2 modules
  - Improve ALSA device and node properties
  - Bluetooth devices have better properties now.
  - The default device routing has been improved.
  + Device support
  - Port priorities are updated for UCM devices
  - ACP devices notify change in routes in all cases
  - There is now RW support in ALSA devices to increase
    compatibility.
  - Many improvements to Bluetooth. SBC XQ support can now
    be enabled with a config option. mSBC can be enabled
    with an option.
  - Bluetooth devices not expose Routes so that they look
    more like how PulseAudio handles them
  - Gracefully handle missing profile-sets
  - There is now a native HFP backend
  - Improve card names in some cases.
  - pause-on-idle is now disabled for ALSA devices. This can
    reduce pops and clicks when the device is stopped.
  + ALSA plugin
  - Use rate-match to reduce the latency
  - Implement a _delay() function to get smoother timestamps.
  - Fix property parsing. Fixes volume changes in alsamixer.
  + PulseAudio server
  - Use rate-match to reduce the latency. This also reduces
    the buffering in audioconvert and improves timestamp
    reporting.
  - Implement rate changes now that we have rate-match
    support.
  - pactl stats will now work
  - Fix excessive memory usage when a capture client doesn't
    read fast enough.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611230400">- Add pkgconfig(ldacBT-abr) and pkgconfig(ldacBT-enc)
  BuildRequires: Build bluetooth ldac codec support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1612353600">- Provide pulseaudio by pipewire-pulseaudio: there are various
  packages in the distro that require pulseaudio, but essentially,
  they should be happy with pipewire-pulseaudio as a replacement.
  Do not provide the symbol though, as we do not (yet) want to
  automatically migrate users over.</changelog>
  <changelog author="dev@dominik-schmidt.de" date="1612353601">- Update to version 0.3.21:
  + Highlights
  - Many PulseAudio compatibility fixes. Handling of corked
    streams, the prebuf setting, seek modes and stream flags
    are now implemented correctly.
  - Ports and Profiles are now managed by the session manager
    and can save and restore previous settings.
    ALSA device handling has been tweaked for maximum
    compatibility at the expense of latency. There are tuning
    options in the config file.
  - Improved Bluetooth support. HSP is disabled by default
    because it is old and deprecated and in some cases causes
    conflicts with the newer HFP profile. Codec switching is
    now implemented as well.
    PipeWire accepts donations with liberapay now.
  + PipeWire improvements
  - Improve draining in pw-stream.
    pw-stream now uses busy metadata by default. This makes sure
    that no writer can write to buffers when readers are still
    busy.
  - Fix handling of empty array/choice instead of failing.
  - Fix crashes when creating properties from empty strings.
  - Make it possible to pass an array to module-access
    access.allowed variables
  - Fix small bug in argument parsing in pw-cat
  + Session-manager
  - Restore route volumes in all cases, also when switching
    routes.
  - Use a default route volume for unknown routes instead of
    letting the system decide on a default.
    Improve profile handling. Don't try to restore unavailable
    profiles. Implement the profile switching in the session
    manager now.
  - Fix handling of Virtual sources as defaults.
  - Handle port switching in the session manager. Implement
    save and restore of default ports per profile.
  + GStreamer
  - Fix a crash with zero SPA_PARAM_BUFFERS_size
  + Device support
  - v4l2-source will now respect the requested memory types.
  - ALSA buffering has been tweaked. USB devices should have
    less XRuns by default. Parameters can be tweaked to
    decrease the latency on capable devices. Also fix a case
    where a quantum change would cause an xrun.
  - Fix mute in bluetooth devices
    bluetooth devices are not paused in idle anymore for
    improved compatibility.
  - Codec switching for bluetooth is implemented along with
    config options to select the codecs manually.
  - HSP for bluetooth is now disabled by default. Most devices
    support the newer HFP profile and some devices fail when
    both are available.
  - Reduce the amount of events the ALSA plugins emit by bundling
    them.
  + PulseAudio server
  - Implement the suspend command
  - Fixes volume in sample info
  - Fix playback of samples, sometimes samples would be clipped
    short. Also implement the target sink for the sample.
  - Use rate match to feed samples. This way the latency can
    be kept to a minimum.
  - Latency has been tuned some more, more closely emulating
    pulseaudio behaviour.
  - Improve default sink/source handling. Make sure all events
    are sent correctly when defaults change.
  - Handle underrun better without causing sync issues. Make sure
    to pause in corked state.
  - Implement rewind due to seeks, fixes GStreamer seeking.
- Do not remove alsa-card-profiles, they are required</changelog>
  <changelog author="dleuenberger@suse.com" date="1613563200">- Remove the pulseaudio provides from pipewire-pulseaudio:
  We first need to ensure our KDE patterns (and others) become
  smart enough to favor pulseaudio until we are ready for the
  switch (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1613649600">- ldacBT only builds on little endian architectures, so we can't
  buildrequire it on big endian systems like s390, s390x or ppc64.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614168000">- Re-add the Provides: pulseaudio; patterns-base now suggests
  pulseaudio, which should help zypp in doing a smarter decision
  (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Update to version 0.3.22:
  + Highlights
  - Per client config files replace the module-profiles. It's
    now possible to tweak settings and load custom modules.
  - Pro Audio card profile support. You can now select the
    Pro Audio profile and have raw device access with the
    maximum number of channels and no mixer controls. This is
    the usual setup for managing high end Pro Audio cards.
  - Many fixes and improvements in the JACK library to make
    devices look and integrate better.
  - Many bluetooth improvements. Playback should be more
    reliable and better synchronized. Support for the HFP HF
    profile.
  - Small fixes and improvements all over the map.
  + PipeWire improvements
  - Add support for restrictions requested by a client. This
    makes it possible to implement Flatpak policy for emulated
    PulseAudio clients as well.
  - Fix removal of params in objects. Previously they would not
    be removed from the cache.
  - Remove mlock warnings by default. There is an option to
    enable them again if you want to check if your system is
    optimized.
  - Remove LimitMEMLOCK lines from the service files. They can
    only lower the system settings and are thus not useful.
  - Implement per-client config files. Each pipewire client will
    now read a config file that you can use to configure the
    context of the client.
  - Implement state and config load/save in pipewire. This is
    used by the session manager or other apps.
  - Make an option to disable dbus support.
  - Add tool to convert pipewire config to JSON.
  + Session-manager
  - Give all permissions to Manager flatpak apps. In the future
    we will use the Permission store to remember user settings.
  - Improvements to default audio/sink handling.
  - Add option to configure device suspend time.
  - Small fixes in route handling.
  + Device support
  - Complain when ACP profile files are not found and use
    a fallback in order to get something working.
  - Add volume support to monitor ports.
  - Fix resume from suspend for ALSA in more cases.
  - ALSA ACP cards now have a Pro Audio profile that exposes
    the raw card devices.
  + Bluetooth
  - Enable A2DP delay reporting. This improves audio/video sync
    when playing audio over bluetooth.
  - Fix stuttering in A2DP source
  - Tweak buffer size and latency settings to avoid stuttering
  - More work on HSP and HFP support
  - Fix initial profile configuration
  - Add HFP HF support
  + PulseAudio server
  - Small tweaks in capture packet size to avoid crashes in some
    apps.
  - Detect Flatpak apps and requests the flatpak permissions from
    the session manager. This means that Flatpak pulseaudio apps
    will now run with reduced permissions.
  + ALSA plugin
  - Reduce min buffer size in the plugin for lower possible
    latency.
  + JACK
  - implement some missing methods to make qjackctl work again.
  - Use the context data thread instead of making our own. This
    fixes the issue where the data thread was not given RT
    priority correctly.
  - Pass extra jack flags around in port properties. This makes
    CV ports in carla work.
  - Many tweaks to the port names and aliases. Unwanted
    characters are filtered out, giving better names to jack
    apps. Default device names are now equal to those seen in
    pulseaudio apps.
  - Add an option to make a separate client for the monitor
    ports of a device. This makes it more usable in apps.
  - add support for system:playback_N and system:capture_N port
    names for apps that hardcode these port names.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Do not provide pulseaudio, but pulseaudio-daemon so we can
  specify in the patterns that we prefer the pulseaudio package
  (boo#1182730)</changelog>
  <changelog author="obs@haasn.xyz" date="1614859200">- Build/install the `pw-top` tool:
  + Add pkgconfig(ncurses) BuildRequires to satisfy the build deps
    of pw-top.</changelog>
  <changelog author="fcrozat@suse.com" date="1615291200">- Update to version 0.3.23:
  + Highlights
  - Fixes for some critical bugs in last release.
  - Fix bug where audio was not drained properly at the end of
    playback, causing repeating sound.
  - Profile and route switching was improved and should mimic
    more what pulseaudio did.
  - Various fixes for xruns in capture and playback.
  - Bluetooth now supports delay adjustment and various other
    improvements.
  - The pulseaudio server now correctly identifies AC3 and DTS
    streams and returns a not supported error instead of playing
    static.
  - Multichannel support was improved in the alsa plugin and
    the channel mixer. Channels should now play on the right
    speakers in all cases.
  + PipeWire improvements
  - Small fixes and improvements in JSON parsing and encoding.
  - Improvements to param handling in audioconverter. It would
    previously not always notify of changes.
  - Avoid updating some properties that we use internally such
    as the object id and the node.id.
  - log.level in the config files is now actually used.
  - the PIPEWIRE_LATENCY env variable should always override
    any application settings in filter/stream/jack.
  - The config file can now contain filer and stream properties
    to, for example, control the resampler, mixer and latency.
  - Add sandboxing to the systemd services
  - Various FreeBSD fixes.
  - Improve draining and a way to exit the drain state as well.
  - Many multichannel fixes. Channel remapping should now be
    correct.
  - Fix bug with repeating audio at the end of playback because
    the drain in the resampler was not draining all channels.
  - RTKit default rt.prio has been increased to 88. This will
    likely still be clamped to 20 until distros increase the
    max priority.
  + Session-manager
  - Don't try to switch to Pro Audio profile, this should be
    a user choice only.
  - Don't crash when metadata was disabled such as when not
    using the audio features of pipewire.
  - Rework the profile and route handling.
  - Add systemd unit files for the media-session
  - Device names should now also have sane names so that tab
    pactl completion works on them.
  + Device support
  - Fix ALSA format enumeration in more cases. Use the channels
    and rate as a filter.
  - Make sure the graph doesn't ever use buffers larger than
    the alsa device buffer size or we get xruns.
  - Tuning of the alsa device timeout handling and dynamic
    resampler. There should now not be any xruns when streams
    appear and disappear or when the quantum changes.
  - Fix bug in alsa device when reassigning to a new driver,
    in some cases the dynamic resampler was not activated and
    things would drift out of sync and fail.
  - Fixes in quantum changes for ALSA capture and how the
    resampler is drained and fed with the new samples.
  + Bluetooth
  - Delay adjustment has been implemented now. Bluetooth
    devices should now be more synchronized with video due
    to proper delay reporting. Because BT delays can be
    large, it can cause hickups in some players.
  - Fix volume in bluetooth devices.
  - Codec switch improvements.
  + PulseAudio server
  - Latency offset adjustment is now implemented and functional
    for bluetooth devices. It is not working for alsa devices
    yet.
  - Handle unsupported formats. Previously we would accept encoded
    formats and play noise. This fixes AC3 playback in vlc.
  - Move some of the configurable parameters to the config file.
  - Fix a fatal use after free when playing samples
  - Improve module handling. loaded modules now show up in the
    list of modules and can be unloaded. This also prepares the
    core for more module implementations later.
  + ALSA plugin
  - Fix drain with very large buffers, we need to manually start
    the stream before draining.
  - Fix the channel layout handling.
  - Improve compatibility with apps that expect the poll to only
    return when there is activity.
  - Fix drain for capture
  + JACK
  - Add a config option to shorten and filter client names
  - Increase the length of the client name size and make sure
    we don't exceed the allocated size.
  - We now include our own jack header files so we can build
    without depending on another jack-devel package. We don't
    yet install the headers or provide pkgconfig files.
- Move alsa-card-profiles to modules subpackage, they are always
  needed.</changelog>
  <changelog author="alarrosa@suse.com" date="1615896000">- Add systemd rpm macros for pipewire.service as well as
  pipewire.socket .
- Use the new %systemd_user_pre macro on %pre to be able to
  recognize when a service was installed for the first time and
  enable it on %systemd_user_post (boo#1183012)</changelog>
  <changelog author="alarrosa@suse.com" date="1615982400">- systemd-rpm-macros doesn't have a consistent versioning between
  distributions, so better assume it's updated enough to support
  %systemd_user_pre</changelog>
  <changelog author="mcepl@suse.com" date="1616155200">- Update to 0.3.24:
  + This is a bugfix release that is API and ABI compatible with
    previous 0.3.x releases.
  + Highlights
  - Many JACK midi improvements and device support.
  - Fixes in gnome-control-center default sink/source handling.
  - Many small performance improvements in alsa device handling
    and latency. There should also be less cracks/pops and xruns
    now.
  - More bluetooth compatibility improvements.
  + PipeWire improvements
  - Implement simple upmixing
  - Disable the resampler when not used. This improves latency
    and CPU usage.
  - Handle max-quantum on devices and try to not make the quantum
    larger than the device buffer size.
  - improvements to how nodes and links are activated. It should
    now result in less xruns and cracks/pops.
  - meson uses the feature options everywhere now
  - Handle volume remap in the channelmixer. This fixes the
    channels on multichannel devices.
  - Try to escape invalid JSON string characters
  - Keep better track of changed parameters in audioconvert.
  - Improve config files, make arrays where needed.
  - Respect NO_COLOR where possible
  - Support in-place config file parsing to avoid allocations and
    improve startup performance.
  - There is no a config option to enable non-power-of-two
    quantums.
  - Preliminary support for upmixing and generating LFE channels.
  + Session-manager
  - default nodes are not stored as JSON in the metadata. This
    is more readable and introspectable.
  - More default-nodes and default-routes improvements. port
    switching should work better now.
  - Wait until all devices are scanned before linking clients.
  - Fixes some crashes
  - Sinks (monitors) can now be set as default sources.
  + Device support
  - Fix startup timers for alsa devices.
  - Improve timers in alsa when quantum changes. It should cause
    less xruns and cracks.
  - Fix UCM setup of capture devices.
  - Only disable IRQ in alsa when not batch. For batch devices
    the hw pointers are updated each IRQ so we need to keep them
    enabled. This massively improves latency on USB batch devices
    to the same level as JACK (with small enough period size).
  + Bluetooth
  - Improvements to profile switches.
  - Improvements to volume handling.
  - Fixes for A2DP sources
  - Add support for battery status when available.
  - Many other small improvements.
  + PulseAudio server
  - handle NULL in set_default_sink/source to clear the default
  - Implement a workaround for gnome-control-center when setting
    the default sink/source. It also sets the target in
    stream-restore to the new default. This fixes moving streams
    in gnome-control-center.
  - Fix some races by replying to some requests after the
    operation completed.
  - Prefer formats of the extended format API.
  - Create a pid file on startup to improve compatibility with
    apps that look for it.
  - Capture streams can now be moved to monitors with pavucontrol
  - Fixes for crashes
  + JACK
  - jack clients can now connect to the 'default' server
  - Move midi ports back to the midi client
  - Only mark midi hardware ports as terminal/physical
  - Use the same midi names as a2jmidid
  - match system ports in get_ports.
  - Improve compatibility with some apps that require a
    fixed latency.
  - Beginnings of the libjackserver implementation.
- Switch off libopenaptx and fdk-aac (because they are
  patent-encumbered) and libcamera (problems in building).</changelog>
  <changelog author="alarrosa@suse.com" date="1616155201">- Enable or disable the ldac codec depending if ldacBT is available
  or not to fix build in s390x (where it's not available)
- Add some more information and fix indentation on previous
  changelog entries.</changelog>
  <changelog author="alarrosa@suse.com" date="1619697600">- Add %systemd_ordering so systemd is installed before pipewire
  on fresh installations. This allows to set the service presets
  correctly on new systems since the %systemd_user_* macros don't
  do anything if systemd is not installed (boo#1185459).</changelog>
  <changelog author="yfjiang@suse.com" date="1620043200">- Disable gstreamer device provider by now because the timestamp
  bug makes cheese video record abnormally longer than it should be
  (rh#1884260).
- Replace all tab characters to space.</changelog>
  <changelog author="ismail@i10z.com" date="1620475200">- Add %bcond_with aac conditional to let 3rd parties to enable
  AAC support.</changelog>
  <changelog author="ismail@i10z.com" date="1620907200">- Add %bcond_with aptx conditional to let 3rd parties to enable
  aptX support.</changelog>
  <changelog author="alarrosa@suse.com" date="1621944000">- Introduce a workaround for systems where %systemd_user_post
  didn't enable the user services correctly due to different
  reasons . This workaround is only executed once, and only if
  it's really needed. In order to execute only once a lock file
  is created in /var/lib/pipewire. The lockfile can be removed
  when the workaround is removed.
  Everyone who upgraded their TW system between (aprox.) the 14th
  of January and the 16th of March and who didn't enable the
  services manually is affected by this. It also happens for
  everyone who installed a new TW system since (aprox.) the 14th
  of January and also for everyone doing a new installation of
  SLE15-SP3 / Leap 15.3 from the iso (new installations using
  online repositories will work fine once the fix in
  systemd-presets-common-SUSE is released).
  Fixes boo#1184852, boo#1183012 and boo#1186561.</changelog>
</package>
<package pkgid="aefa077c4af33adccbca12990024a578426b118bc8380f8a37b60fd5b89d65d0" name="libpolkit0" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="d79879d088cb830784d0b47cc448fd571d308cf8d6289a74ba3392fb11a336ae" name="libpolkit0" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="d9550057b27b9e7ecf3c531858e749985c7a152e7de0f4ef241589dbea2b0806" name="libpolkit0" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="38e785a8228dd000ef727c727a08e86b3e32c3705446e837348e07796f977852" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="0180cbab122e98cf9594580b6e57b5be064905f0c333b537ef6917c191813d07" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="fa6694bc1e228512e18fc26753014f55332da246ddae9744869f38d77b1215d4" name="libpostproc-devel" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="24d742b648aeaf87c54b663dab68ddf2c5c1a0edf43f4bdb3a782649d9a78bb1" name="libpostproc-devel" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="e3a0b91b43b3ab0d506c62529ec7df7fd25a981f1fcaf397fe17557948dd49ba" name="libpostproc-devel" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="7181eaa366b4650a2d04dab6e9b877a1430a190a43f0f2a35ff52d686510baa5" name="libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="c2c0c738cb4d1a18d8451f3037a6cb3e4a2208feff3375d5594a8f96dd89569d" name="libpostproc54" arch="aarch64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="752e8aa2cf95e52f5d2a0e0cfce1609c725845e054634c4a149a2f424c7c84e1" name="libpostproc54" arch="ppc64le">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="0da71cc259106484f163ba77fdd39091f262d3f90dae4c41913a0cbebea05ece" name="libpostproc54" arch="s390x">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="cc880bf57af218a1381ac26f8b19ed42b5095b6a013dfd57fab72d676b08d0fe" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="d624b48371dd739dceb6d63cb1ca69988003b21c8ec321898595b2b6b5421e79" name="libpostproc54-32bit" arch="x86_64">
  <version epoch="0" ver="3.4.2" rel="11.3.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="qzheng@suse.com" date="1532088000">- Add ffmpeg-CVE-2018-13302.patch: Make backport from commit
  ed22dc2 to fix out of array access issue (bnc#1100356,
  CVE-2018-13302).</changelog>
  <changelog author="kbabioch@suse.com" date="1532692800">- Added ffmpeg-CVE-2018-1999010.patch: Fixed multiple out of array access
  vulnerabilities in the mms protocol that could result in accessing out of
  bound data via specially crafted input files (CVE-2018-1999010 bnc#1102899).
- Added ffmpeg-CVE-2018-1999011.patch: Fixed a heap buffer overflow in asf_o
  format demuxer that could result in remote code execution (CVE-2018-1999011
  bnc#1102689)
- Added ffmpeg-CVE-2018-1999012.patch: Fix an inifnite loop vulnerability in
  pva format demuxer that can result in excessive amount of ressource
  allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688).
- Added ffmpeg-CVE-2018-1999013.patch: Fix an use-after-free vulnerability in
  the realmedia demuxer that can result in vulnerability, which allowed
  attackers to read heap memory (CVE-2018-1999013, bnc#1102687).</changelog>
  <changelog author="qzheng@suse.com" date="1536926400">- Add ffmpeg-CVE-2018-15822.patch: Make backport from commit
  6b67d7f to fix an assertion failure (CVE-2018-15822, boo#1105869).</changelog>
  <changelog author="qzheng@suse.com" date="1537185600">- Add ffmpeg-CVE-2018-13300.patch: Make backport from commit
  95556e2 to fix an out-of-array read (CVE-2018-13300, boo#1100348).</changelog>
  <changelog author="qzheng@suse.com" date="1540296000">- Add ffmpeg-CVE-2018-12458.patch: Make backport from commit
  e1182fa to fix an improper integer type (CVE-2018-12458,
  bsc#1097983).</changelog>
  <changelog author="qzheng@suse.com" date="1540296001">- Add ffmpeg-CVE-2018-13305.patch to add a missing check for
  negative values of the mqaunt variable (CVE-2018-13305,
  bsc#1100345).
- Rename cve-2017-17555.diff to ffmpeg-CVE-2017-17555.diff.</changelog>
  <changelog author="qzheng@suse.com" date="1542283200">- Add ffmpeg-CVE-2018-14395.patch: Make backport from commit
  fa19fbc to fix a divide-by-zero issue (CVE-2018-14395,
  boo#1101889).</changelog>
  <changelog author="qzheng@suse.com" date="1542283201">- Add ffmpeg-CVE-2018-14394.patch: Make backport from commit
  3a2d21b to fix a divide-by-zero issue (CVE-2018-14394,
  boo#1101888).</changelog>
  <changelog author="qzheng@suse.com" date="1560168000">- Add ffmpeg-CVE-2019-12730.patch: Make backport from commit
  ed188f6 to check for scanf() failure (CVE-2019-12730,
  bsc#1137526).</changelog>
  <changelog author="qzheng@suse.com" date="1560340800">- Add ffmpeg-CVE-2019-9718.patch: Make backport from commit
  1f00c97 to fix a denial of service issue (CVE-2019-9718,
  boo#1129715).</changelog>
  <changelog author="qzhao@suse.com" date="1562587200">- Add ffmpeg-CVE-2018-13301.patch: Backport from upstream to fix
  a NULL pointer dereference while converting a crafted AVI file
  to MPEG4 in the ff_mpeg4_decode_picture_header function in
  libavcodec/mpeg4videodec.c(bnc#1100352).</changelog>
  <changelog author="qzhao@suse.com" date="1574164800">- Add ffmpeg-CVE-2019-17542.patch: Backport from upstream to fix
  a heap-based buffer overflow problem in vqa_decode_chunk
  (bnc#1154064 CVE-2019-17542).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624622400">- Add ffmpeg-CVE-2020-13904.patch: Backport from upstream to fix
  use-after-free via a crafted EXTINF duration in an m3u8 file
  (bsc#1172640).
- Add ffmpeg-CVE-2020-21041.patch: Backport from upstream to fix
  buffer overflow vulnerability via apng_do_inverse_blend in
  libavcodec/pngenc.c  (bsc#1186406).
- Add ffmpeg-CVE-2019-17539.patch: Backport from upstream to fix
  NULL pointer dereference in avcodec_open2 in libavcodec/utils.c
  (bsc# 1154065).
- Add ffmpeg-CVE-2020-22026.patch: Backport from upstream to fix
  buffer overflow vulnerability exists in config_input() at
  libavfilter/af_tremolo.c (bsc#1186583).
- Add ffmpeg-CVE-2020-22021.patch: Backport from upstream to fix
  buffer overflow vulnerability in filter_edges function in
  libavfilter/vf_yadif.c (bsc#1186586).
- Add ffmpeg-CVE-2020-22020.patch: Backport from upstream to fix
  buffer overflow vulnerability in build_diff_map() in
  libavfilter/vf_fieldmatch.c (bsc#1186587).
- Add ffmpeg-CVE-2020-22015.patch: Backport from upstream to fix
  buffer overflow vulnerability in mov_write_video_tag() due to
  the out of bounds in libavformat/movenc.c (bsc#1186596).
- Add ffmpeg-CVE-2020-22016.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability at
  libavcodec/get_bits.h when writing .mov files (bsc#1186598).
- Add ffmpeg-CVE-2020-22017.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  ff_fill_rectangle() in libavfilter/drawutils.c (bsc#1186600).
- Add ffmpeg-CVE-2020-22022.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_fieldorder.c (bsc#1186603).
- Add ffmpeg-CVE-2020-22023.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  filter_frame at libavfilter/vf_bitplanenoise.c (bsc#1186604)
- Add ffmpeg-CVE-2020-22025.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists in
  gaussian_blur at libavfilter/vf_edgedetect.c (bsc#1186605).
- Add ffmpeg-CVE-2020-22031.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_w3fdif.c in filter16_complex_low()
  (bsc#1186613).
- Add ffmpeg-CVE-2020-22032.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_edgedetect.c in gaussian_blur() (bsc#1186614).
- Add ffmpeg-CVE-2020-22033.patch: Backport from upstream to fix
  a heap-based Buffer Overflow Vulnerability exists at
  libavfilter/vf_vmafmotion.c in convolution_y_8bit()
  (CVE-2020-22033) and buffer overflow vulnerability in
  convolution_y_10bit() in libavfilter/vf_vmafmotion.c
  (CVE-2020-22019) (bsc#1186615, bsc#1186597).
- Add ffmpeg-CVE-2020-22034.patch: Backport from upstream to fix
  a heap-based Buffer Overflow vulnerability exists at
  libavfilter/vf_floodfill.c (bsc#1186616).
- Add ffmpeg-CVE-2020-20451.patch: Backport from upstream to fix
  denial of service issue due to resource management errors via
  fftools/cmdutils.c (bsc#1186658).
- Add ffmpeg-CVE-2020-20448.patch: Backport from upstream to fix
  divide by zero issue via libavcodec/ratecontrol.c
  (bsc#1186660).
- Add ffmpeg-CVE-2020-22038.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the ff_v4l2_m2m_create_context function in v4l2_m2m.c
  (bsc#1186757).
- Add ffmpeg-CVE-2020-22039.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the inavi_add_ientry function (bsc#1186758).
- Add ffmpeg-CVE-2020-22043.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak at
  the fifo_alloc_common function in libavutil/fifo.c
  (bsc#1186762).
- Add ffmpeg-CVE-2020-22044.patch: Backport from upstream to fix
  denial of service vulnerability exists due to a memory leak in
  the url_open_dyn_buf_internal function in
  libavformat/aviobuf.c (bsc#1186763).</changelog>
</package>
<package pkgid="fb7cdaea2cdf8a9301ad3d86d98b3f143f08520f9ee622c9879cb65152ac8072" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1598961600">- Just cleanup and reordering items to synchronize with python38</changelog>
  <changelog author="mcepl@suse.com" date="1599048000">- Add faulthandler_stack_overflow_on_GCC10.patch to make build
  working even with GCC10 (bpo#38965).</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Buildrequire timezone only for general flavor. It's used in this
  flavor for the test suite.</changelog>
  <changelog author="mcepl@suse.com" date="1602244800">- Fix installing .desktop file</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244801">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  x86 == ppc.</changelog>
  <changelog author="mcalabkova@suse.com" date="1602590400">- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- Rebase bpo23395-PyErr_SetInterrupt-signal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1606219200">- Replace bundled wheels for pip and setuptools with the updated ones
  (bsc#1176262 CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1606305600">- Change setuptools and pip version numbers according to new
  wheels (bsc#1179756).
- Add ignore_pip_deprec_warn.patch to switch of persistently
  failing test.</changelog>
  <changelog author="mmachova@suse.com" date="1606478400">- Pin Sphinx version to fix doc subpackage</changelog>
  <changelog author="steven.kowalik@suse.com" date="1606824000">- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function (gh#python/cpython#13236). As
  a consequence, no longer pin Sphinx version.</changelog>
  <changelog author="mcepl@suse.com" date="1606824001">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="fb787ffbe9b36f2d60c273e0632366a3525f24b19677c2c35ca0c93b0dd11c88" name="libpython3_6m1_0" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1598961600">- Just cleanup and reordering items to synchronize with python38</changelog>
  <changelog author="mcepl@suse.com" date="1599048000">- Add faulthandler_stack_overflow_on_GCC10.patch to make build
  working even with GCC10 (bpo#38965).</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Buildrequire timezone only for general flavor. It's used in this
  flavor for the test suite.</changelog>
  <changelog author="mcepl@suse.com" date="1602244800">- Fix installing .desktop file</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244801">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  x86 == ppc.</changelog>
  <changelog author="mcalabkova@suse.com" date="1602590400">- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- Rebase bpo23395-PyErr_SetInterrupt-signal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1606219200">- Replace bundled wheels for pip and setuptools with the updated ones
  (bsc#1176262 CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1606305600">- Change setuptools and pip version numbers according to new
  wheels (bsc#1179756).
- Add ignore_pip_deprec_warn.patch to switch of persistently
  failing test.</changelog>
  <changelog author="mmachova@suse.com" date="1606478400">- Pin Sphinx version to fix doc subpackage</changelog>
  <changelog author="steven.kowalik@suse.com" date="1606824000">- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function (gh#python/cpython#13236). As
  a consequence, no longer pin Sphinx version.</changelog>
  <changelog author="mcepl@suse.com" date="1606824001">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="88f81561cf76fc17694d579c340a5df39c7e96a65e13984d57a29dd743a55cec" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1598961600">- Just cleanup and reordering items to synchronize with python38</changelog>
  <changelog author="mcepl@suse.com" date="1599048000">- Add faulthandler_stack_overflow_on_GCC10.patch to make build
  working even with GCC10 (bpo#38965).</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Buildrequire timezone only for general flavor. It's used in this
  flavor for the test suite.</changelog>
  <changelog author="mcepl@suse.com" date="1602244800">- Fix installing .desktop file</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244801">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  x86 == ppc.</changelog>
  <changelog author="mcalabkova@suse.com" date="1602590400">- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- Rebase bpo23395-PyErr_SetInterrupt-signal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1606219200">- Replace bundled wheels for pip and setuptools with the updated ones
  (bsc#1176262 CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1606305600">- Change setuptools and pip version numbers according to new
  wheels (bsc#1179756).
- Add ignore_pip_deprec_warn.patch to switch of persistently
  failing test.</changelog>
  <changelog author="mmachova@suse.com" date="1606478400">- Pin Sphinx version to fix doc subpackage</changelog>
  <changelog author="steven.kowalik@suse.com" date="1606824000">- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function (gh#python/cpython#13236). As
  a consequence, no longer pin Sphinx version.</changelog>
  <changelog author="mcepl@suse.com" date="1606824001">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="6176952631697bbc7142a86c6d47f792feb1942fa3ab6b19f6bc45302e1db02c" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1598961600">- Just cleanup and reordering items to synchronize with python38</changelog>
  <changelog author="mcepl@suse.com" date="1599048000">- Add faulthandler_stack_overflow_on_GCC10.patch to make build
  working even with GCC10 (bpo#38965).</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Buildrequire timezone only for general flavor. It's used in this
  flavor for the test suite.</changelog>
  <changelog author="mcepl@suse.com" date="1602244800">- Fix installing .desktop file</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244801">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  x86 == ppc.</changelog>
  <changelog author="mcalabkova@suse.com" date="1602590400">- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- Rebase bpo23395-PyErr_SetInterrupt-signal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1606219200">- Replace bundled wheels for pip and setuptools with the updated ones
  (bsc#1176262 CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1606305600">- Change setuptools and pip version numbers according to new
  wheels (bsc#1179756).
- Add ignore_pip_deprec_warn.patch to switch of persistently
  failing test.</changelog>
  <changelog author="mmachova@suse.com" date="1606478400">- Pin Sphinx version to fix doc subpackage</changelog>
  <changelog author="steven.kowalik@suse.com" date="1606824000">- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function (gh#python/cpython#13236). As
  a consequence, no longer pin Sphinx version.</changelog>
  <changelog author="mcepl@suse.com" date="1606824001">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="3c11add8e1c4bfda5eba2e60e95fdc9b9815c2253f4ed21ed2092e46a4311193" name="libpython3_6m1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1598961600">- Just cleanup and reordering items to synchronize with python38</changelog>
  <changelog author="mcepl@suse.com" date="1599048000">- Add faulthandler_stack_overflow_on_GCC10.patch to make build
  working even with GCC10 (bpo#38965).</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Buildrequire timezone only for general flavor. It's used in this
  flavor for the test suite.</changelog>
  <changelog author="mcepl@suse.com" date="1602244800">- Fix installing .desktop file</changelog>
  <changelog author="dimstar@opensuse.org" date="1602244801">- Fix build with RPM 4.16: error: bare words are no longer
  supported, please use "...":  x86 == ppc.</changelog>
  <changelog author="mcalabkova@suse.com" date="1602590400">- Handful of changes to make python36 compatible with SLE15 and SLE12
  (jsc#ECO-2799, jsc#SLE-13738)
- Rebase bpo23395-PyErr_SetInterrupt-signal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1606219200">- Replace bundled wheels for pip and setuptools with the updated ones
  (bsc#1176262 CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1606305600">- Change setuptools and pip version numbers according to new
  wheels (bsc#1179756).
- Add ignore_pip_deprec_warn.patch to switch of persistently
  failing test.</changelog>
  <changelog author="mmachova@suse.com" date="1606478400">- Pin Sphinx version to fix doc subpackage</changelog>
  <changelog author="steven.kowalik@suse.com" date="1606824000">- Add patch sphinx-update-removed-function.patch to no longer call
  a now removed function (gh#python/cpython#13236). As
  a consequence, no longer pin Sphinx version.</changelog>
  <changelog author="mcepl@suse.com" date="1606824001">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="1a7f34ded615849b88c8f819a30bf032df5eb39770680ad4610e1be4193fa6c4" name="libquadmath0" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d5e9570623bac939e2994b178dddfa4fab8208dde9295278da16f47fc68e41ed" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="943b7beefda78a2c461b8ec81c3eb51b4143b927c75a84612503ad81e783ef5c" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="guillaume.gardet@opensuse.org" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="rguenther@suse.com" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="rguenther@suse.com" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="rguenther@suse.com" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="rguenther@suse.com" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="rguenther@suse.com" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
  <changelog author="matthewtrescott@gmail.com" date="1603800000">- Build complete set of multilibs for arm-none target [bsc#1106014]
  * Fixes inadvertant mixture of ARM and Thumb instructions in linker output</changelog>
  <changelog author="rguenther@suse.com" date="1603886400">- Update to gcc-10 branch head (a78cd759754c92cecbf235ac9b), git872.</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge: Install libgcc_s into %_libdir. ABI wise it
  stays /%lib. (boo#1029961)</changelog>
  <changelog author="rguenther@suse.com" date="1605096000">- Fix 32bit libgnat.so link.  [bsc#1178675]</changelog>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="867ac1384d0ddb8757b11bf91dda6e2f09f1913685d4a092791f2985081c939b" name="librados-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8d5fd44096c23b7354bf38a528ba67e46c8299e9f0ad9df368fd5d850a63ea75" name="librados-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ad4c235661d84f9b682cb2a2bb244c5e817c17509fa9db5c4d536eef5fe7cde" name="librados-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3cdf3b5e016edf103b75b32f3c6860948a548f1713e0319b82d542ef666047a1" name="librados-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1f30f8e71c285e6c38b11bdbbdd1fe8989965d7292c6e2403ca7914c1b3d08c7" name="librados-devel" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a2243653386722e966d506b4eca17c3ae8434e387a6292744e9590fbff2441b5" name="librados-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="46895cb6ed135d50bbcaef0f978eecce298454d31ffec287d587b219435fad6f" name="librados-devel" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="95dad405d610529e1da71a079a381ab184f0488d35d9979eff7528d41b21fc34" name="librados-devel" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="717a4942f70d0e6d4f03fed7318cb2f5be22b1fa5ce1b5dfd58ab0ee176f4944" name="librados2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="94a15c5a9ee6cb5624e2fc8a9c3862920a9fd3bec8c78ed216f9e8b367ebbf42" name="librados2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8b5280d92abf00063ade045d80e16ee1d22c80ae4966ae65db0d59c0d21b4022" name="librados2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="84e87a50bc00d7995a10ae1d8ecc8b885b1ae758b7a0fb5daf4845585d714029" name="librados2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d42955809a4f65b9ccd5a3227df403915776b4d93e315afdd8dbbb43dc78d293" name="librados2" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="28000a3b7fc2db6a2364dc2cca3873cfd45a0b15029365f27f882b9de8a5adfd" name="librados2" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="969d44795b5b4d14471d411b3b92aa6841b6bd70e99005850dfb1b318ce58428" name="librados2" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="3efd1af55f56b485d4902f77b058244e90a76c14eb7587d0ee03f01b494dc17b" name="librados2" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="2cfb0de3c9cae0737481c24f79b127ef7baf7dda0eb763868ad0f6932f1aa7ad" name="libradospp-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="01529a2c82b63b07421884c84a44f5f675b7a8d8ed1397baa64e77d0a25c5bab" name="libradospp-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dab3e3236e250390e0929bb3d129ddafa1d49688f5a80a434d18e50cba517cb4" name="libradospp-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cf2c3f41987b8c7407ea550a043ced8a805a7904e0a88b1f7ef419db72bcc2cd" name="libradospp-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4ff245e8d42e26e0803a1042b909b23443ec564463cd1d11f98eb5e9b2483e62" name="libradospp-devel" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a21f1860a418e4e5f45dcd3fdc0a564792acbcf2cad7c8b90cbc7151200b2219" name="libradospp-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="212100ee2cb4c1f325ddddc6dd267abf7a788dce24f13f887bed2c3dcb71b88b" name="libradospp-devel" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="1f08b5521f6c05b0d5ae64a722994ac2bd16e15c8f02340cd0c11a8279e3225e" name="libradospp-devel" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="a7993b8f14d14953e066e32bbc654b1e9c22108304995421d798d1c1fc13809e" name="libraptor-devel" arch="aarch64">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="cdc8dad5d41b116fd8de01461fa32ba3395ca20497762b0896d0d2f6e4918850" name="libraptor-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="8ecf5dafc926cac49f983e39872fe2e9223fb980e60607424a1fe81266b84168" name="libraptor-devel" arch="s390x">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="45473b767aee532ed46777878e12491783b599225f2afd4e2e6a12ecd0e43c14" name="libraptor-devel" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="f240ef778485de628b8f20cec7fdd6227c6249fa6b72a864d246137088d64cc1" name="libraptor-devel" arch="aarch64">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="9f05fb06886b11aa5f7c2a69905dbff156f844fefd1b42e1f79ec5333f82bb93" name="libraptor-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="08ad597bfa9a8e58f463fa74775c9646be128e97e346585b912b20a01fd885a1" name="libraptor-devel" arch="s390x">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="93597fa78ac19ce0a69b99918cc6b7676a2262dab6f99d1b1a3a23046c853c90" name="libraptor-devel" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="680f7a8cf35e124d1f741443d027a3ed5aff2da964739aeff283994f5ce7c4c4" name="libraptor2-0" arch="aarch64">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="32571701d791298d9964daf0db48757c3423285f55b84ac75c24b0a2c7f24065" name="libraptor2-0" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="e833223c41669e0c4c8d469f23340aad21250b13ee99a01df32caee2d1db4d63" name="libraptor2-0" arch="s390x">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="d484b6305b007a68832ff2dd9ccd1cb2398c4e137f463215c3cc80ca48ac267e" name="libraptor2-0" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="aaacd86306243eca9bf91e0ce419594c366d6a457510e15b09cba4270a927ea5" name="libraptor2-0" arch="aarch64">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="9bcf063305d44f83fade1c5dcbadf8862007ddcfb3d8ddf89bbf984a2023cdf6" name="libraptor2-0" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="e4ed365b20b08bbb368ea2e8703b7eba3c2fdbd82f1abe2195bbb4e98450287b" name="libraptor2-0" arch="s390x">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="10e9d10c003c7aaacb6c1109eeab5a7d7afaba285bd3d639019f6d3e1988189f" name="libraptor2-0" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="98c755b2686b6192b1b7d4b85de5b0d61277f391263ad463bb39e082f49a2c43" name="libraptor2-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="9.5.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="48780011488d764ffb1c70b7ca435199855b580b2904f457887cb938b35ee05b" name="libraptor2-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="9.7.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="358f6cadece9666139b15fd3542d77852a3d9a820d1bc2d56561ada693421e75" name="libraw" arch="src">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="55a444a4abb062b952033ca3caa7184694cfaa435a5173d010c8d513d22dda05" name="libraw-devel" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="290f92db45f3ecd384a4fd38ba931a8db1967a4a041da02aec17bf06ad15b9ed" name="libraw-devel" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="c3a81f9f49f49be4b2de7c43ea79a7bda3163b28e70e9a1e96d2fbb8bff72a7e" name="libraw-devel" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="8956ed5dd587c98230d5695fe66c83507e3e889a6723804a7e74ab3db02167c6" name="libraw-devel" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b2ed61702d4f38a7c3d604f485ecee986975aab011d12a3353299323a7ba99ad" name="libraw-devel-static" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="fbcf033d1f5b3e866f03502f365d764a56dd5e1b8e1a3d0e8cf0e7575d849e25" name="libraw-devel-static" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="8cc360330d0099c67453bfcc6cf0e1ec8279bc876276610abe20d78d685bd8c4" name="libraw-devel-static" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="4eb353201607a31a49b8c62f5b1f76b29dca9f099470e528c6485e8e12ab3c74" name="libraw-devel-static" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="c8a57b3ff9987bb0687b42a2c8a1d05624110eab234f4e3ac3242ee5a471912e" name="libraw-tools" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="44577f99c4b950c31ba9fb1af7fb49b36ba2ab3109838b835e50d7b5e34fdc3d" name="libraw-tools" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="752a6c8f3d4569544867b6c1a08ee3efc26baeb2e173a3e228dc5dd20e9ac6bf" name="libraw-tools" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="422c9511d7bcbe71f9c93ccd5b6f7a1b6729e9988e21ccd9c7abf48dd2b5f0ff" name="libraw-tools" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b740a8adbb49121c1fae36e549fb8b5ec40be2795b2f2bdfb32b73dd13963536" name="libraw16" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="fb4bb3bac125221d2dc670c74b2af404a793b9a71fc6ab30e2f9301f418cc1ae" name="libraw16" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b9a209744cbdfa8a6d414be97f0a743505f7d9f5eb6a9d40744fca2c039801a2" name="libraw16" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="f61662c2ca7cc58faf5514670a96b9d2015f6280f4cede01059ccb01e638161c" name="libraw16" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build with GCC 6:
  * Add libraw-0.17.1-gcc6-compatibility.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091201">- Complete libraw-0.17.1-gcc6-compatibility.patch to fix build
  on ppc as well</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- update to 0.17.2:
  * strncpy usage was not compatible with glibc bounds check</changelog>
  <changelog author="nico.kruber@gmail.com" date="1484136000">- update to 0.18.0:
  * License changed to LGPL-2.1/CDDL-1.0
  * Camera support (+87):
    + Apple: iPad Pro, iPhone SE, iPhone 6s, iPhone 6 plus,
    iPhone 7, iPhone 7 plus
    + BlackMagic Micro Cinema Camera, URSA, URSA Mini
    + Canon PowerShot G5 X, PowerShot G7 X Mark II,
    PowerShot G9 X, IXUS 160 (CHDK hack), EOS 5D Mark IV,
    EOS 80D, EOS 1300D, EOS M10, EOS M5, EOS-1D X Mark II
    + Casio EX-ZR4000/5000
    + DXO One,
    + FujiFilm X-Pro2, X70, X-E2S, X-T2
    + Gione E7
    + GITUP GIT2
    + Google Pixel,Pixel XL
    + Hasselblad X1D, True Zoom
    + HTC MyTouch 4G, One (A9), One (M9), 10
    + Huawei P9
    + Leica M (Typ 262), M-D (Typ 262), S (Typ 007),
    SL (Typ 601), X-U (Typ 113), TL
    + LG G3, G4
    + Meizy MX4
    + Nikon D5, D500, D3400
    + Olympus E-PL8, E-M10 Mark II, Pen F, SH-3, E-M1-II
    + Panasonic DMC-G8/80/81/85, DMC-GX80/85,
    DMC-TZ80/81/85/ZS60, DMC-TZ100/101/ZS100,DMC-LX9/10/15,
    FZ2000/FZ2500
    + Pentax K-1, K-3 II, K-70
    + PhaseOne IQ3 100MP
    + RaspberryPi Camera, Camera V2
    + Ricoh GR II
    + Samsung Galaxy S7, S7 Edge
    + Sigma sd Quattro
    + Sony A7S II, ILCA-68 (A68), ILCE-6300, DSC-RX1R II,
    DSC-RX10III, DSC-RX100V,ILCA-99M2 (A99-II), a6500,
    IMX214, IMX219, IMX230, IMX298-mipi 16mp,
    IMX219-mipi 8mp, Xperia L
    + PtGrey GRAS-50S5C
    + YUNEEC CGO4
    + Xiaomi MI3, RedMi Note3 Pro
  * Floating point DNG support
  * More metadata parsed
  * Existing API changes:
    imgdata.params fields (all very specific purpose):
    sony_arw2_options, sraw_ycc, and params.x3f_flags
    replaced with single bit-field raw_processing_options
    See  LIBRAW_PROCESSING_* bits in documentation.
  * Fixed bug in Sony SR2 files black level
  * DNG files with BlackLevel both in vendor makernotes and
    BlackLevel: BlackLevel tag always takes precedence
  * ChannelBlackLevel added to canon makernotes
  * unpack_thumb() data size/offset check against file size
- removed libraw-0.17.1-gcc6-compatibility.patch (fixed upstream)</changelog>
  <changelog author="pgajdos@suse.com" date="1485777600">- renaming libraw15 to libraw16 and amend spec file to avoid such
  inconsistency [bsc#1021327]</changelog>
  <changelog author="pgajdos@suse.com" date="1495540800">- updated to 0.18.2:
    Fixed several errors (Secunia advisory SA75000)
    ACES colorspace output option included in dcraw_emu help page
    Avoided possible 32-bit overflows in Sony metadata parser
    Phase One flat field code called even for half-size output
    Camera Support: Sigma Quattro H
    Fixed bug in FujiExpoMidPointShift parser
    Fixed wrong black level in Sony A350
    Added standard integer types for VisualStudio 2008 and earlier
- added missing parts of the fix for CVE-2017-6887
  and CVE-2017-6886
    + libraw-CVE-2017-6887,6886.patch
- added missing fix for CVE-2017-6890 and CVE-2017-6899
  + libraw-CVE-2017-6890,6899.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1505304000">- updated to 0.18.4:
  * Fix for possible heap overrun in Canon makernotes parser
  (CVE-2017-14348)
  * Fix for CVE-2017-13735
  * CVE-2017-14265: Additional check for X-Trans CFA pattern data
- add libraw-out-of-bounds-kodak.patch, upstream bug #101
- remove libraw-CVE-2017-6887,6886.patch and
    libraw-CVE-2017-6890,6899.patch:
  no need to patch dcraw.c, it is not used</changelog>
  <changelog author="pgajdos@suse.com" date="1506340800">- updated to 0.18.5:
    Fix for possible buffer overrun in kodak_65000 decoder
    Fix for possible heap overrun in Canon makernotes parser
    Fix for CVE-2017-13735
    CVE-2017-14265: Additional check for X-Trans CFA pattern data
- remove upstreamed libraw-out-of-bounds-kodak.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513252800">- updated to 0.18.6:
  * Fixed fuji_width handling if file is neither fuji nor DNG
  * Fixed xtrans interpolate for broken xtrans pattern
  * Fixed panasonic decoder</changelog>
  <changelog author="avindra@opensuse.org" date="1516708800">- updated to 0.18.7:
  * All legacy (RGB raw) image loaders checks for imgdata.image is
    not NULL
  * kodak_radc_load_raw: check image size before processing
  * legacy memory allocator:
    allocate max(widh, raw_width) * max(height, raw_height)
- partial cleanup with spec-cleaner
- other spec fixes:
  * switch to https site
  * remove executable bit from copyright
  * remove outdated comment about build parallelism</changelog>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="c0660071e54f507de4bd173890abd16a544502b5e8610f7bd9f4f65302fd70e2" name="librbd-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6bd846ea66c84bc624751f005792b5eeff4fb87b51c1caf5d4172ecd3ab9a7cd" name="librbd-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8d3b04095f29d61d1eda9b1ecaffdfd14e602609d9e0687f891fd36dd3accceb" name="librbd-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a8e4afbdc868904a0e9d6ca64a896d18979fd048275ebb4479f2380d133bfd50" name="librbd-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="64fe6a76e5ca7c4195f41e3930ef661dd0630b22590245eebc019dc57fcb40b4" name="librbd-devel" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ac82559f0a0c62a8454ea19493facad5643d6d192e021791b9cb21ab1f4d2baa" name="librbd-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="99ef40a3e70b309fef7055fe80912544102b099019b83278fd2306cf24b214e8" name="librbd-devel" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="bcd2fd2eaeccb674f264efc7af5d7b0ebabeb7988524b77526a17d6281618c92" name="librbd-devel" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="fa1bdc495a1f63cdd8f1ce0ccde7635c0a22198471dc7d330852d1d0a1f59e94" name="librbd1" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="934645f78d38473520c889e9fc885e89cbcb132e326f3f10437fdd61a0ac4f0d" name="librbd1" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc61c7e643fb29d4abf1c4a6f643d4e007e28569ec44f98bbbfc7478f7c8c681" name="librbd1" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="67ecf3d0488d6f04f9bff76cfefc5e586bc182515e270cf29cc2308b862b7261" name="librbd1" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ccbc360055cdef33ff60cdb19e33423051f86d65b734c9fb1f33d64501ca72c0" name="librbd1" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ff30cbb39090974c7a6ce217f55d8b448c877abc9ddc1c013de9e67eee579416" name="librbd1" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="4092b2f268ad0e99f46d349248b23c6519d5d526dfb89155c30daa16b32ae85b" name="librbd1" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="692f4855e420215c9be2a5d8b3fa3238c942ee8d080fdc6e095ac7e42bf301c7" name="librbd1" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="ef67db2e60eb6ba290bdffaf2fe45cabe0242559fdbbec3c740fdc203525db35" name="libreadline7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="018c1a393dedffccfd739741e589e61df5fb471f0ba0bc314a70fcb99ee16658" name="libreadline7" arch="aarch64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="bc66a9413545b3628518efa083548a5f1772afb547cc0dd6e0e06baa577767b8" name="libreadline7" arch="ppc64le">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="bb6b0fdff3b10b82960254a4f7d9ae8d8506f29321b503482bbd99efa231451a" name="libreadline7" arch="s390x">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="52ef5774dd8a2f1f7d439a53c34778c50f5bb84704158bf74b74961906818772" name="libreadline7" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="1b047815b3e36a8e9d4380f25cfcc1590abfe6116904bae09a19f07cd6dc93da" name="libreoffice" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5fdbbaecca314e5499010f04fae5dc2ac45142878bd9b32cf1cc5a8b6c8516d9" name="libreoffice" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f546338c0dbf0b95fac55e0ad4c0e1f2d3bc08033462c5376723d4e0deb6d3f2" name="libreoffice" arch="src">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fc232fd4429027b78c6801e00e9d3f951283be95ff569e0745a4319644a64b64" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c35f8acd1f9f7b0397295e0b5b883c040947c6c4c4b5c3d2d9a3b43e4302fb8c" name="libreoffice" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e9d53da09edabc5c46f337ed9045fa9e150f71479b35d948cfa3453b845703f4" name="libreoffice" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="45960547669e08d9a628d71341239f7b7b96ac4d7aad4f94b6a9a77976739db3" name="libreoffice" arch="src">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a3da2881b9a1f56d8b3e9b59bbce485b74c5e327beeed3dcd23434ddc0c67977" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8ef2e4eda06ff642af5448bf674d2b39de77d7e443c3749d469ab4fc0abc10a9" name="libreoffice-base" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fe29da5d0c3663a009603e2bcff351805a46cbfa5ab7b39af1e29ed9d53823f9" name="libreoffice-base" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4f3c2a7fe7f34c9d0937db5c111ea516d6adb2ee1e26ff8ad6ca411c8875a938" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="93912fa86ada9a13f8dbab2ef8d1309e79a46c046d9da82b4174ac055c45c440" name="libreoffice-base" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="985b7ba0bc9af63cb6c03756f159e37c744510a6eb455eddbbe3f5ff965f38ed" name="libreoffice-base" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="97a613fa91ae726d84ddd6dc5e6bc3e8c6bddfbbe17d16133a4277f83c134329" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f02990dd91a4ae9147b55dd723982597d24a666fba184347ad32f402c3f5aa6b" name="libreoffice-base-drivers-postgresql" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="242e0df8142b54c947a44a2838c5eacbcb727c718627ca1d3598ae5e7add88d6" name="libreoffice-base-drivers-postgresql" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d7f43b2f0f00f20b0a641edcc21d7a16b827bba4bb6cca269f6d5a7dc937a7db" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7f918e6896daefc83a628ad55a217b4cbd6b2837025b0782788fb05a82ba2a57" name="libreoffice-base-drivers-postgresql" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d21e32f59a682f641b36dbe36894794dd4d926b3b400bc876d4021b2e5223d3a" name="libreoffice-base-drivers-postgresql" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0a9b4dcb9e74dab1f07d5674757f62e6407feed7823c5e2855d553e8841874a9" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e8dd1285d79cd9bebd2731a92daafbd38912931f5a04a9eaa19cf2d89c548ac5" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="60418828c455d9c19e823d2a626f10740b648bc31dff6d7ed3725088becd1ac0" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f9ad61f9acfc125f740c0cf35b8605864e0eacb32b549176be6c90468913c2c9" name="libreoffice-calc" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="784b1be0cf7780f08e7a729beea9fbd492963e47ef38462292ca4c6078e37091" name="libreoffice-calc" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6ed4841dd79d01100565fc8e2614b5475eb4a9acdc7a8884747408b3fbe8a907" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8e3cf5f891f15353a8ed92e00335ef4b86345966f7aeebb4d2e4d48c27f62979" name="libreoffice-calc" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e0995ad2270e96cc968e333c4ea98fe659c089b3c1b9f81e75f04c827fcd8ed6" name="libreoffice-calc" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7d4fcd7a850fe334a8fe14779a5630828f30afbf031c34815193c6108dd23e28" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f6f69d16e8e5051d4936e990fa237cd0d5c628bf1132b10920260e87f99198eb" name="libreoffice-calc-extensions" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bbc23e3b01a704b7442ab77e0e4c926f570b8435cd955788e461333be13908f4" name="libreoffice-calc-extensions" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="271c6e66071afd18f1e0a0f43a74b4a7c75852eab6023d7887460f904417a0c3" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0ab6dbe3d82c5ac9773f72111c970c8d7faaa78d214382602f8a8eef5570045a" name="libreoffice-calc-extensions" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bfca3cac44bb5d50e86e9b35dd7430254243e0254b40d91ac7c2eaedf535207d" name="libreoffice-calc-extensions" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d378ffeabe3e28a79fcec81e3aeeb6bd49c1a5d39bdf3065cf3e26024a533166" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cf52ef559c162d9e7b8318a29a94f8c17829f9887d9d5762a5bd71865fc945ce" name="libreoffice-draw" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b954989c383d2fbc58a76ae7f4cf0bef35141820371292121e0dbb35180c8a01" name="libreoffice-draw" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="78439979adfe6d3bf8dac474b59c5b01002b228f75f14bd2f8be12d05b6d67be" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="95faf30486c132b4a36437157c61dea0125a330a4fb6ca81cece8dbac9d5d847" name="libreoffice-draw" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7de5c3c00f357144b58716b38cc12593739453dcbda7b9245d665c5044c3d5b4" name="libreoffice-draw" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1ad546a0d7906d195a9fddb70a594565709632d556d950fa332b23c928b9d354" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0bee5a2da93061f0e89230b6c1e9b9cb31fdda869894f760cff2fceeef7e5fcb" name="libreoffice-filters-optional" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1f15eff900d00a5c743a5f4a144920e7b7c47b980196570a45d329c8aae20f24" name="libreoffice-filters-optional" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fa80cdeaadcd5b6649b8365139df134bb0307cef2c063253e978359e4a31b90a" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7cf0cb0d9753110a21dfd7c01f5834540200519606f115cc649de61cc24320c1" name="libreoffice-filters-optional" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="55aa67ec4af39787c85079f220a9a465119a5842fdcd63958810c270eb246d32" name="libreoffice-filters-optional" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cb8b3c27e620c48ca1160e72c1a13f683891b0b584a8a38ca8456185d91f9581" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f80a214a72eff6361570c6cc1014f1abd49c8695d59ce11c13e7ccf8bcdf02b5" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="268e085006e2aa9253c90fb0dc4dcbf368538a444871ac2bb3a9ee22dbf5622a" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d13c269a78a7dd1657b957dd0038ac5ab53198a8a3bc3e9e97cad8c10a8be877" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cbbe9ff5ac215bc4dd67e5bf9d118d3c999f0103a33fed7acb9b55758fb11559" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7d95e3adb39df9fbfed24944d092045bcf50fe5dc57f8e16c9b1843fb5979ecc" name="libreoffice-gnome" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4c2d98f85488725e87a13a25fa8836e5b238e1d1eb07b54dd96aacf3e248cd0e" name="libreoffice-gnome" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c651aa86c9ef43e16c8915c2f038cdb32e543cf7a73ba798fa1b0ab16279dd1a" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dea2e982f66253e9bbd00763ec668ee668f2ff9a9f61dcb96c96c3b88eac1876" name="libreoffice-gnome" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5e433b5c4741f0b41ce029474021b0306738c5dbc00b6d911409580173f8dbf9" name="libreoffice-gnome" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="79e38a498cdb86e7a36aa6466b09b7b034c35f7c06af6259b8c32e37d33c7d27" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9b2f86f8be04bf8d5c28fe633c70bd44960ace518b536772841819eb18f9df42" name="libreoffice-gtk3" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="175aa0d680c29fa44b1045d0cbbd6b3679427c0da6d140e54b0e52d8a4cf74f8" name="libreoffice-gtk3" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4d6a822d5fe2885dc23886178b57d41dd8f119b7567b1c1a8f12d6682de94f56" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="269e420a5401f17d5afc3667c0654db45b28190014d841abd417a2095f10b9ea" name="libreoffice-gtk3" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ad17d879823622f28803bd22630029c56d25199b84a16691877e5c899f077f03" name="libreoffice-gtk3" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d1767e4c19232e0d63ce832d4a14d538e3823714d537e8b4875daa1a8fd654bd" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6200e88f9480b5f0dbe08f6283db2bd8ab13933f19a920ea237a45922ffb75a4" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="461edf64b2609c89ce00ecd067aacbe5893fbdd55d6107c79fecac717021f592" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="972b2107ae0d66b05572dbdad3c4ba0a6d6fb3229e32c72a1558a9634f325a92" name="libreoffice-impress" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a445dad3c9ca4eab30dc3e7d51a0ad2789db78b9d6e1d28e874c897249fdec0a" name="libreoffice-impress" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="149c5bdc65087165461f660c254670bdfa8342609819d002973139bfcedcf161" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="14457ccf9e997f93774e813d54f8fdf98a42c327253571e334dd15728b3f2f4c" name="libreoffice-impress" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="270b940451f68ddbf622ba05c6735f243722908db4a32f6494d17acfbfa6e9c4" name="libreoffice-impress" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f0c2ae4979b0efdf4f57517f32f858efedbc39b7c68ae6084f33fffbdf5218f1" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8b73c4614d06e16f2e8a2c42990bf4934f54cdf461e5137d882f013e593bd6c5" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="074b614bccd6566f95896bfbbe648360bddd19f516ee046749d09a1557fd7758" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f064a1d2009ddc91bdbc0105a4eaf6e24331902b87376fbb3b6ad7b22250b589" name="libreoffice-l10n-am" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="aa6c3528e1545069aa60686206ab9ae2ea8730bd021b2531358c70d2fd14ecb2" name="libreoffice-l10n-am" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="988f516709d5f5b6097bb4986461b91d570b1a8a01cb5fba43bb832feafe29e8" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3c6cf8299d98c434640842caf4922c3a1e95a7e247d56b630fc74e2a40bf49b7" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3cc797f25e591b58e45c5e3b7eb48a922e0238a48952d1825b3bed9bb0385897" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="958b7358458963fc801d1a2c511a8551853b0326242a62e69c9fabf727a369ad" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2f4ed122d81e5892a344958a65fb359e4f2d09bc2f96e10fb71c7cc5f47817e4" name="libreoffice-l10n-ast" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4ef746bc49d3a45a4f230e0727fef742e97fcf8af83207913f3ea4b9abe9b3d4" name="libreoffice-l10n-ast" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9114a5abbfe48cece20df9706d89ecf20bb1b5d15a86401417aa3143d9153f68" name="libreoffice-l10n-be" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5db7bd8c6f3f3af859c60efbb38e8710ce8f8765b89b7a14b4f2b162e76c41fa" name="libreoffice-l10n-be" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b8e3e94e531c96edb1dbed8aa73773f9d39ce096733eb27a1061dd4dccc8a88f" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ca7ed84ae8aa25ad7455465c5877c59d6c3dae8321f495a9320d31db7198465c" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4944e736a3adb978e1ef8c64015b5ba66c412e54acfa1f591fb0c287149dfc39" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="31dbb1c0b80d3763b020f68310d1ecab7cf458b04c0a52b39ab4e7c336d2a4fd" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dd122ce3108e5a6b9e29e1b17ace550541cd9187a239942dff842590fd98f58b" name="libreoffice-l10n-bn_IN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b60bfbb6417545a52e18dbb083829a0924c95d9e0975d35cd66d81a51bfede8d" name="libreoffice-l10n-bn_IN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cacf43a741d760fa6e1035c1cdfc08641cd80a2cf1f3af08d22f18705c203139" name="libreoffice-l10n-bo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f8e92aee2f271646e9cf4d41e9a535b30d795ce8e1a856e9be1ccacbb47efdcd" name="libreoffice-l10n-bo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ad8e16915875e0a88da1113775e1c122645e77a5d31aa1076b0a19fe5d7be7b7" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a7d300ae568b4f06f6998fc1c6f65cec2d38bf1954f64dbd9936b417490c2e88" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a43036ef37710c98bdae499c0d9f52e0a9aa89dc60ece3bc445eee9460c8773b" name="libreoffice-l10n-brx" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4fb216503ece07f6e91c573d165138da2752f40a1418531b9054847e6d7a7c32" name="libreoffice-l10n-brx" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f8ffbc5747118ad0e62ee247a19b32aa78479667a97595bf82cf596161877631" name="libreoffice-l10n-bs" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f151baf62fce8dc3a42ff8a1876227fe9600ba25cfb5e645233aae812c0253c7" name="libreoffice-l10n-bs" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="12405db53d36db6b9484be998706fbd8aecdd587e8eba9092be0db8686320406" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="72908f71d21fbd985147c5ccafe2cc6c0fd24fec86375cdbd47fb2ddb92c65c0" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="76d3e8ccdd6b7e9327a3d7e2b4d57c135729e037a06456d46ebd12292df23fc7" name="libreoffice-l10n-ca_valencia" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3a02755731fa7ef1dd4a3d0382cd2d16a71efe4bb2d7913da7fb21ec8a54f543" name="libreoffice-l10n-ca_valencia" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d6e7191b055c2707d53de19e925c71147a09e1a530bac42e2fb89a174e8ed749" name="libreoffice-l10n-ckb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cf1e7526f662abb46b27d1c78ab102056f22c47a010c3df8be60d2aa6465eb23" name="libreoffice-l10n-ckb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5c110aa127ff5c84c867f278e0d56dda88ff1bc240388ca5622df585fc834159" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c03082a9d1916496fe8e26be44c87a05ab12cb30d10eaf78dd482af9ca45fb00" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="309277ff389d6ab61c46ce0202914f901dad5440c26ed5ddcc2744d8ae69d9d0" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fe9b6f028ed8bd07b7f3a98058324edae032b5e17d160cc9c7f84c39dfca0184" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="96028204d82891270cbca5a3b73a5d2585ce347ab89b22f9fb39be41197f096b" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8f58f3ea44c2313559dc6e0e90a40710bf0b4dab7cc4fefa4d1374faf9e57c36" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a5369cd49c3d3facaf45a6ba8441e1488a6d406ec7bd1d05eee84f3aa6b6f933" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="db34cae476cbab9e3b9f019a15c25c323652fae8e42b07ffa38ceddccaf6b15d" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a64c238c4b6a37f46151cd94726a603dc384878cc0b7a2ef7c79cbcad7527939" name="libreoffice-l10n-dgo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5d9ac768e3060eb67ef484ca9ee6b58c3518d59b2fc28b2329351cf906b13ba9" name="libreoffice-l10n-dgo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9ce07b3f43296fcdfdd8b0d87c1caffeb8936bdffe3f37cf06d7161faf1e3b2f" name="libreoffice-l10n-dsb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a4910fc2ade1eb79c1f89d9ec88d09b2af19d119277d7dc5a723de357a04519e" name="libreoffice-l10n-dsb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1efa04e227e2c3246ca8ede7cc29c5973afffd7820b2dcd9af96f22722743f59" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="47d332703b28425a1e10e2ccf1e93658ee6e26a7878f4f1a8616db1a49101209" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3fdcaf33fa3221dcf19994a3ba2a3ccfb4bff19c60c63c44936b8a750704e9fe" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="114b44bcfd878a6273aa05b651ef5b5431d6e7fa31b3287c6abc72364280e3ec" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6cec0800b765cc0789e17003a454ce9af5a0453b6339d818b9762505d8b6e2f7" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="015f22938fdf4a938ab7d094b8bb66a869311d2a02b66980251aae7343008f7f" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="933098918b052129771ab97cc98eda06d086e3529ffec0959b2005790bf662b7" name="libreoffice-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dd6654fd8c2aeeb4948fb64fbf418ff3bf4c9fec8b46aa0a201cc7cab94b2c61" name="libreoffice-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="178d52570e5653ab5e6c139b7eb3e1f2cea1555e8ddefd4ece0246e62de80d52" name="libreoffice-l10n-en_ZA" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1ab7738fe520249072f357a467e431fed42176ad1a8853e9bfaa7bd541a180e6" name="libreoffice-l10n-en_ZA" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="71ffb4bc1003d906a2f4b27339468f25e2d5f382cc2ee5faa17b23f3361368fc" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2e0f08526d93eff68b52b7e2a77d7f689d56a3726afd55f47c7952c746822e73" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0e84f0eaaba5c80062e14d88f7b988c93fe1bc07f044cd5b6d0ea5bb07c7fcd1" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d56a95c7c4bc4733463788f9663b5f6a6bb5b96865135852e4c6766b92c479c4" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="10efbd169f98a9c03b1ac27297a0c5b30f34af47a8df4088912fe7afb9266e9b" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4b0ea40d31e71e465722ce0198277544e24320ec0894dbc25ca26620e845640f" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e0915e1f23ab0fea167814e7151e60c6e576bc7849ab8b202259cddaf10e3589" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b3f2d5aea110da077bbaf8ca32437ee04afbb8db51be770d192b3ec99d81044b" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="675332aa7d1cdcf489c4323edaaee401b3260ed527d89c8cd864061fc6a3101e" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1712202e652503c178e142f0679ace7ee54ea19ef4f130cda630ab81df0f4ac2" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4ca48cb4245ecfe3fe5cdd1a9fa360628778ce02556f36a95f23ded2a7b7a4a8" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7ff2fccad17b6c99e623975bd92f80a75492305507918461164ce8022eeea258" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9c1663994a123cf8fcdf7d6a8c754be0c47e3d49fedbe038d8f265256d598074" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3f9fd571740973d152f1466b412e6d7a15676d5709518e2b5b6460b653045a50" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ccf50bd522547b08c5e0b4e234d65a1c3bf8f60ce923375fd0c0cbfa7cadf4cd" name="libreoffice-l10n-fur" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bfa9ac38764e719db6c1003c3b82fa9bd5b2d398ec3ef345de0ff6596c35367a" name="libreoffice-l10n-fur" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="649ff6b0090d587f635d3ea2a2214aec4d9ed1c0aeffbab58cd692459ed9d430" name="libreoffice-l10n-fy" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e14eef402ad49c0cc5425a85a3d0faa9a4430e45aaba4fdedd556a8caef21057" name="libreoffice-l10n-fy" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1fad93c6c07c3b04e64057572bf8043eb646d55f7ebc79a937f06177c638ca7e" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a3c66fbf1908571a8eea88d33af7840d79fb62249ae0c6f9561ad50856445b3b" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="625e84edaa61365ee51b23832518ff90fd80cd822d75136e5e1d05257a30705d" name="libreoffice-l10n-gd" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="52c106f73df12df4690cdd269eee8e19ebac1d5554612c0609d2f5de71d217e7" name="libreoffice-l10n-gd" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="16cdabaa892a51a0a1397b170752536b1f5f5fee2737ca6a5cbb4dffc1548d54" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dc7486f0892ab3ee0cb1d24c2040cae34284cc9bde424e996410434d4ddd5764" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b1d3ef30c8321af7b903bd1cfce4158a70888a42059c6db876d36d7ad0859aab" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ea6b74e7f67ac5a9c2f86bf67d6c069aaedca9c7473ddcb40484cf5a8a319c02" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4f42195116c98c3d7550479f81c8bb2712763ce7b1c8278008a223d9befdedc1" name="libreoffice-l10n-gug" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="514a08c45216e000cc017cf64ed48727c712361575599970d14ffe8f16d9161b" name="libreoffice-l10n-gug" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7018327fb722636e5d7253ec8903b01343bf147d7680a8cf939327a9dad79974" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ea9f582a6efedbdc60d777273d2769e69d0f6aba1ff4b986844b56ca0483c607" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="908df88b17e4776ef0a22cfb59c040ad37df46c34e3dea01f96291b9ef8cce13" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7c4f7dc9c1f750387d63992501dc4ba32f9c322dc7a8951dc922706a8080628a" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="de4e411158cb7fa5d288f39e255ddee54a6b007a72cc10bc59d1534f4ab35b61" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9c78dbed4cd39fd310bb5bc586c85d810f7fb00f00a7bdd1d85cd8ba5fc5a665" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0521d3ba64c70037c9f28082796580332241c032805c0cacf19bec2d1afd442b" name="libreoffice-l10n-hsb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b8f2ef17f7d27be14272be25880043116036684f89814df9c41d3edebeb32651" name="libreoffice-l10n-hsb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="242ffe420c85c248f687b169affd035b6e28b01bc9bb80a787e0d241fcfdcf8f" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9c495d45ee3a130d5ed99c87e18975ffba6e0b8ab2f86d2fae0c53abdfea7de1" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="94b778ffe1987edccc0b276bfabdd33e37d8e6cc0d74ce166ac5baad49b03f0f" name="libreoffice-l10n-id" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fecc5069565c2b4108e2866029ae9433542b8d4a090d747bc43efdb864bceefb" name="libreoffice-l10n-id" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9c4adc0b4ce57c8bf07963ff9283297dbf2eb80856c54df3b392315ac0161491" name="libreoffice-l10n-is" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b9fa3815a3fa87fffdfa26d512d067dcab4c143bafdf54c13234f1bcf6b58dd6" name="libreoffice-l10n-is" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="267487172f1d420ebd4a015930876b2a4e80250cce05a62755f1d4086ea3bde7" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="48d63802f7d239b9ab932562b081ff79a28d00049368ad20e345df7bc3f5db56" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9ae8fbe7ed3ccbd895574232f775dde2379d44c4ff9636090c2679ee0b5cf0dc" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d34fd9230cb479e278d6810626e0f339ed773872963dee425f899149d3a28a7d" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bbd03eb9918908cc8671e7384125e862c9b20713b482d69c548aed755f8dc655" name="libreoffice-l10n-ka" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3c230cfd0bb4944f04aec6b7cd7f1f4aa4772f922eba26c53e99496b6259e644" name="libreoffice-l10n-ka" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="98037f53a879a84a11fd84d099f609f0bc4ecfbe11e31c61f83d3253df4e6917" name="libreoffice-l10n-kab" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0be038b54ac88e76abdde3fcf2ec8b67c391b747a8ee58fefd2eb13678414b75" name="libreoffice-l10n-kab" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8795b69dd8a7f54cd9042c19a38e6a9872d3dc31bf43cac295c43b1fdedd6897" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="166625a728b8f1e9bc6a10109677c801aa8164bee8cf300747fdeb0f8fe22cf1" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d6fdc2da1b27ad5537561a29b163b2d73b69c44b297bbbf106da80a5bb8a7d80" name="libreoffice-l10n-km" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="491625b8db420632eae83791fd72c160591237c455c21dd79f70a490f1dbe538" name="libreoffice-l10n-km" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d1ba7f364680dd0c8bd52c6783576adafe09da124ab7252b1401aac5ae843151" name="libreoffice-l10n-kmr_Latn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c54d239296dffb19d7cc34fd58f8e532efacd60ceecfd3e07b4d350bae170df4" name="libreoffice-l10n-kmr_Latn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e93672f3f6888bc878e558de38b9770d1bc5adfc96e7337a317f157afbf37fcb" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3b37397ed7caef14736ecd166a7804360ab88e2da7a962590375ad7ef084d1d4" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c60823aeb0b583578cec16528d105540fc1f75f9737386840bf59c58c8d9ff8d" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cac3a16563f8f8ca44a1d075aa44eac478008f4ee7115e842d1a7c8bb7496d0f" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a68e424a1c72122789d9d32d75011993d0e926b11e051c5733b66bbebd8ecf89" name="libreoffice-l10n-kok" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3305c270a52ea2b8f00f17faf57eb53f7e7250c8d19594eeb70139760f588da1" name="libreoffice-l10n-kok" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="405d9b436d6f84e8133c5910c36414bc337bb07459baad41763cc3c34f04fa33" name="libreoffice-l10n-ks" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d9a559f2e807262a8b37d880dc16172c45d35201a07e961ac4cf6b57c2a22070" name="libreoffice-l10n-ks" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a706d548563562a0bbf61d3cc1d519a1badef10b76e5dc550b8608eda8fce35b" name="libreoffice-l10n-lb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f89e45705ce3eb9aa9d8347ea0dd5d7edd9c2faa5677dc26829cc18ce517f4b8" name="libreoffice-l10n-lb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="03bcfd905fc8f60f34b76f6ad17976c17202e23937a185b79f5bbd6d6973ed5e" name="libreoffice-l10n-lo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3fadb4d465f24f85475585803dfd41b87781d16227858b3323030dab5ad14b0e" name="libreoffice-l10n-lo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ff4b6f0711063794b11558629044cce0c386ecdfaa59b9364e107def8b0c99f2" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="29738496f14bd1f681a833c8f1c65112639e8eed99ae155d54bce94455aeaaa2" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f5f37eb0a996ab3192e762422508773325e8366a837a7c826090d7f35c2f91c4" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a6b570d21e827e7d328e58f00d927533936b17716b8e95e08e415539983d01a1" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="49ec2c6770661047a630dcea8354c0d355149d11b0b76b53ac23ffaf59da1ad8" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b590467d9357988ecafda55cde31d7910add7ed47ba1915f8e380a6b8aba9cf0" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="17dc154d6ca82bb8fa60efef537400d28de3823127d6483730ed8a7135d7beb8" name="libreoffice-l10n-mk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="682f48b9f3d784b543ac9ae28c897ec796f9ca680f583a093e8fbf6646e49d26" name="libreoffice-l10n-mk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="746d48ea2ed798b999fea92475b61716f03b68b970d6389b5e8a11301f16823b" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3a6cbf79806badf217b4547fe271007af3e9e1af6ae4ffb6778b2c312102685a" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5b6e8bb8812c73c8d101c1a30b89294684cefd425e2afcab1755ef5d0b179e43" name="libreoffice-l10n-mn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d0518dfbe3c2ad86d9ab6bc9379fe0a0bdf64d6882f6f2fa901c9e6f6b43e5ce" name="libreoffice-l10n-mn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cd5412f4a1fd0c82b8c40f6634aae46468cbd31da0b8d0044b272c77617fcd80" name="libreoffice-l10n-mni" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="38f37547368c83e29c1a1ef19a107f502e1b99c978bea47e0dc9d11702e6ae66" name="libreoffice-l10n-mni" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="73bf464cee386af083c7fee5fed4311f53ebc36356e90ebc078d8008b9202827" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="724262a432fc393da4fa5733a630a7a580ed14d51efba6c0f9ffd80c7f9fcd91" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7aebfde1c96b3fba630db0eee7caba037481a1def16aef1a632fe4ac673f10f7" name="libreoffice-l10n-my" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4573a8d6f1cc69da8d6737460bf9e689b76577f8c667b50fa317107db64086c5" name="libreoffice-l10n-my" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ec08da66f1d8c424f5e69dd6530610ba75e2fd6948e9ee083fd6a47fc8d9934a" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0e2879b65c372b359b440e4737dfffc30edeba40d53fdfaec5cf7c27b30356eb" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0296c23fc86cb6a76ad5f8bc6cec404f642903823152ae93de712f0caaf7df2b" name="libreoffice-l10n-ne" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cbeb7d1b7cae32867d0431056dd5b9ac7379ae92eccc090a6c17461e60787dfb" name="libreoffice-l10n-ne" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="31c726604e5246ecc6939f6bb5354e37a5c423a046a41d6ee61f996e269f6d1f" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6805f1553669fad91338945cb3a954506f449e5b154b79bce303a5a595f08a74" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0cc8565f1e68ff6ab87ada27c180f4e5086a169c9cb2760ccf9cf106e247ab11" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dce99481ccebcbf4463ca58d070e353eb0f967c47943932575f44182873dca93" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="df0bd7c1a34eff7de11aad506b3dee924b5e84e32a80a60b5c6d4567f6043cea" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="96e2fd89ba1e3ef99cbdd8b06f36e07864350c5296269048e32c3c95b33e0624" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7a3dbb003ecfc2513fa74014b66ff87aca6ecc3f4c22b82bee9aaa90a060baf1" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bb7fbeffce6239486d530949d92163afceda1fe9d9aaf4b71fc9c3af0999aa09" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a7dbeeb4f6e4e33d85fbe3be922ab8b66c58aaf90f8e22bc1ed4caedfdc2460a" name="libreoffice-l10n-oc" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d2467f61a078a2525759f8047a0571942497881cc2a55b6420c49890437f45e2" name="libreoffice-l10n-oc" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d70be7d8c1872e488e4a7e0570b76480e633a55bb5db4ba6aad82ba44322a1d1" name="libreoffice-l10n-om" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="366330cb179383d95edb636b99cb6f8bc1854897ec25a75357f4bf87148638d5" name="libreoffice-l10n-om" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4481c64cbd52d25cc935fca9ff6ad400293d6cbb04ba1878138e833fc3617d81" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="48d8d52667ac8cfc3a2a7dbd939373378dc84033211129e0634afd27b46fae55" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b338d5f74355546637965318b8bd7be85f3d7f971b2ca0ece1b4562ff23b8dff" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="da35577552d8079e2fa75b6be3d5cdf776cdc627c6c467a90929b64dd27f7056" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f57e3de61c1c2fd202a85b55502841d6e9b298ede12f34b20a3a0f37ee29e30a" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="aa5afcbf36d3596d81f8192793e036bea657091c4ba521f1eaa3d1cc6d448ca7" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cb345a58a9f8dbe3177058cdd214601f583cf439954c2a6eec4053b47e566291" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2b3a32056c6fb9ce9ca317fa826426a61371c7f339c1b13e0bcfd18e5fe817ed" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9888ba2f926fbd765125d633c22ee75f741791be50719f00dc40965c43871387" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5af47c7a5a25a795a4e475c4c1421c7ae24c0abf4cfa00fa73c878f2c5c6f927" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8da4fb0cd24ec3ac1a5bfe8bb7c1f64576fafd74f4dc1af6220b3a8b570f950b" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="68240e27c9b5b59938a81a8334c278bd04ee076c3bd987bed4165657f3e5a288" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="78f9d6005663931c39ffdafb15586cf6f83eef0249406c9ba046aaca3905e40b" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2261b397259f455ec8a12a6e2dc38d3995028b438a4db503f3ca275a16816af4" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f09c871b365655655b6c28716cecb5c4c10ca55f58e60fa106e5d3d4e37bbc7e" name="libreoffice-l10n-rw" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="759c1e8f5d0f10d3188a5e6608d7b2184638eec894da6e98a6724592eb68f8bc" name="libreoffice-l10n-rw" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f108ebc19fccee9c3eb0385ec5231b8e829fce5d2d4304bba74fb03eb08b52d1" name="libreoffice-l10n-sa_IN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="44210737eacb045b83c57c219d5386334b2584ed463eb173a86fb91597dc6c8c" name="libreoffice-l10n-sa_IN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="79ee04d0beb02cf9bf1a40222c7f5601fa778299d7394c0430d6a94a3a848370" name="libreoffice-l10n-sat" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f2c4f94cb4ba2c3cc7c516b86acf30242069c817e49288f39ef966fcdbf68a91" name="libreoffice-l10n-sat" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d1abfd987d1866e3d76c194de6df207e8c0b03c6525531189f4265f36676e439" name="libreoffice-l10n-sd" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="585ef762f93ef1266df04c5aa9a9d1518d9e52062f750e15a2873bfffac7b6d1" name="libreoffice-l10n-sd" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0b3ec7fd8ae96af4eb879b944aef79e42509b3acc61d22e98929c99a34375e43" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8e50f91561c3dee96dd119d89a819a42765e1027b33cb687c5629354947a38ae" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a6a993c0373f334d1190f06397dd6833c63e15e24aba283125570ee640068bdc" name="libreoffice-l10n-sid" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c9ddf14941ef582fd8fc7f85ba1fbe30ce29aa189e2d2c2e81608d0e5aece676" name="libreoffice-l10n-sid" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3874c2f9d8979a37b3c566e9cc1fd249f6e9da87ea778d89838a6d10afeedcc8" name="libreoffice-l10n-sk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6169204badf872198211d692bab6d7faacbe82d3279772118ca1951cff6228ec" name="libreoffice-l10n-sk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a835bbddb7d07d7b194886457473f82fbcb3d369e6e7f291587d3dfb0081f0be" name="libreoffice-l10n-sl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="63c7b2b700417081aee9509fe5dd9025653c46bad14c00a5cd069df450f9e122" name="libreoffice-l10n-sl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f82af30acaf3b649243809304cc7edcec1dce9e6c8c71a8e1cca77c1a59fc7c9" name="libreoffice-l10n-sq" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="839bca6dbcb5469bcb29487f0ac2bb46a13d88a76948e7c3af2e0695c4b7fda2" name="libreoffice-l10n-sq" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bec09eb65a60aae171e5e789b1d9d72f97dd69292ada0986488396aae5e7007d" name="libreoffice-l10n-sr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0ef17efae1d0670166664f1486d51b6f2fecf723c9531b6c36f0abf6209d515e" name="libreoffice-l10n-sr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="532d4057228325d8167e56976968093a031a4f0c0cab68002549cb6b4145426a" name="libreoffice-l10n-ss" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3162be7ef54f11e153b3b0896178fe7eb95cf19c0d27832c0b7b55fee6975d65" name="libreoffice-l10n-ss" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a8480d818eeff6097619b34a49a130191093286f2fced3a8488167081676e2e5" name="libreoffice-l10n-st" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="32a6ffed21b85ad6e844c6e5dcbad436e0483a711d47babfb2b5573874be1ea2" name="libreoffice-l10n-st" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3bf8a1b107c66176bf044fcd7f1373e2fe2ac69841001ee14fd0412de3b1b5c9" name="libreoffice-l10n-sv" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2f3e3cac3a5ebc83c2e01f4ab2dbc4f884a2a5df6b33bacb0d1b33061a73cf3c" name="libreoffice-l10n-sv" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="12ef93a95f9b4504e1a11804c7ef1bb961eb4b38b98c140ea14174d34fad83c3" name="libreoffice-l10n-sw_TZ" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="36a79ab347ffa8fc6766993316da6937ab2796ae564fdef4bb2a1caa23faf833" name="libreoffice-l10n-sw_TZ" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9e0e3413069fa73ab264d23c3e79c0c0eaf9baf6a29a82e5e309b0a818134978" name="libreoffice-l10n-szl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e5a1af6e17e56884ce0564f0202f3ac7dcafe4ba62460fe9ae51a53ece6f5bbe" name="libreoffice-l10n-szl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1976218022601322efac2a4114b6987941de31105ac7d56d05c5e62d10a5a4c3" name="libreoffice-l10n-ta" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="69a861010b74f8408bfeab194045c7043d28282245c984c94e38dae405054836" name="libreoffice-l10n-ta" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a23babbd864282aec5297cad5d045b574da5c614c0a04b65e8197d4ddfe72176" name="libreoffice-l10n-te" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="88b84023c141af0b2fc93ab659b6621bfa89afdd6d0d45fb79ba387fa60097aa" name="libreoffice-l10n-te" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="32cdc58e37c72e4849aa5cf47edbacc2b31b8f6ee618d1051d21f36319ade9d7" name="libreoffice-l10n-tg" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="38390708dd45bd63407de3a14b38bc66d36cfc5901b75d94b5c84718873a0124" name="libreoffice-l10n-tg" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2f2306f020edd0ce76e7cb3fe65c0c8c1739006f5eda53f8526924038ae87e46" name="libreoffice-l10n-th" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0a24045b41ea408ce3d65ced721a5d36bc026739b3199471fc50c2c713d4abfe" name="libreoffice-l10n-th" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="af9f7d59985cb4e690afc7ff2c8e44e2797ee8cbe441d55cdaa6d32362be8695" name="libreoffice-l10n-tn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cf8f0a1e31f9451c130705c2938b51d5397d2fbf6a8acd953109ddae5c5c3c59" name="libreoffice-l10n-tn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="88cf768493a7523a87f3390539bb4d2e91c757bd366712ad8b7360a8b00651c0" name="libreoffice-l10n-tr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6e50283f1ac965b45cd25abbf4a8ebb9b88b808830b71d7f9fd3e821368cca6d" name="libreoffice-l10n-tr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1c724fd3eb6ca7967112497ccf6db733ecb00f9ba4ec671a6a34f52d5e76efb4" name="libreoffice-l10n-ts" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="73d298734324c8c3a92965f02cb77290d845fd0dd8af93fa40c317500d282cc1" name="libreoffice-l10n-ts" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9ac4dc70102125b454caa5aa47f06f08b52eaef61cea3a34124b854c3fa448be" name="libreoffice-l10n-tt" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0a33acb7970e9f639d432ac4af7011f43d96e23431a14603df8b3ffdaa1a35f0" name="libreoffice-l10n-tt" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b2448f7788fc96805983cabf2ab7480ab53935549c16113cf26ca9a30d25aef3" name="libreoffice-l10n-ug" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ecbedcadc347eef100e6b86bf41418ba7855423a31f457931610802418457d44" name="libreoffice-l10n-ug" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0fa59222b1fdd37bcccdb1bd129c9ff15b695e213777c73f7fd673e1c994a280" name="libreoffice-l10n-uk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cd6faee5c04743024cff3dffaf340fe538584c4f697d0df193c68ea524f83310" name="libreoffice-l10n-uk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5222c07e98817f228859c123a6718c24ee9d21f8e4f16a2367760cfe424d8b29" name="libreoffice-l10n-uz" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9aec1b28ef2d40107833564b44475cf0e0c260f6755d075291c935386af69b9e" name="libreoffice-l10n-uz" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fe689fd5da0a8d60659ec61c6609dbc7ad2a82a4e0aa29aa94ffe9611e989c22" name="libreoffice-l10n-ve" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="00d2b0f7e7ed3e7dfdf59a772ac2920c2ab7dd70af61a6598fece8baf12df41f" name="libreoffice-l10n-ve" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9639e2060b92056304355917dcac518ecac292a612005d1acb379ac028ffd921" name="libreoffice-l10n-vec" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6d4b68ee83031a53ca33be133a71bcd0d6a01266d4c1ffc151d4debe5a84ecc7" name="libreoffice-l10n-vec" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4493b9fb9354cc66482a249abec2875657c648087f4d4adffbdd847cf6769eab" name="libreoffice-l10n-vi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="244d389be1a0c35ccaef93b6a07762fc114a69643c232562ca6ae1478325c15d" name="libreoffice-l10n-vi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9360465242f103db31a7360462e3334337b0806cdc4b4acfeae235b7bc90cd3a" name="libreoffice-l10n-xh" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3a0aaee9834e1774720e70993b608c7863e14662fd30125841b525eb58262d69" name="libreoffice-l10n-xh" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="69449dbb75c559ef6112111c9829144c751c8a917170ac0915e5c9ac21bcccb5" name="libreoffice-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="31bba5b023182765e68b655f74d6d3060eb40054f732fc071290e9d2d89a353b" name="libreoffice-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="df4de8468c4d32cdd0042ce743cd2b3d534844fd5e412296e98e9cf87b5fba36" name="libreoffice-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7dc8bb3aa02630f46ebcc428fe617f6f0af6c29530e7afe2aae2a29638e4aa3a" name="libreoffice-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="83b3411a82128854a2d599a46ff627e31690074c37b8ad0b4dcb0863df921181" name="libreoffice-l10n-zu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="aec38d77ee918f24eb4981c811599bb9ea6aafc2196bbdfcbfb947c62e81eadc" name="libreoffice-l10n-zu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="35a45827ac0f5f595dc7afa88f826cae55c4da372733e3516564bb81396acb95" name="libreoffice-librelogo" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f53209ca1e72f22459678f056af40e5c549a7f08834eb0513ff79bba1ee393d9" name="libreoffice-librelogo" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2ac2c81bc089467d6fffa5cb0fa3268c0bc2059ba1b567c0f8a54374b3e20337" name="libreoffice-librelogo" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1c5f1ccb0b050da2a8d6981744543be7b061076ddb26986bd86daed0633c94a4" name="libreoffice-librelogo" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="952ccd9499adeb28589296e274f1f2b4e8c7686a4a75bd4da42b068a732b2e1b" name="libreoffice-librelogo" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="048ffedf92c1ba65973aa027d14bfcdffde2ca528b0c379e2bd8dc6cdfbf9afd" name="libreoffice-librelogo" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e6863868a53cb2e15490cbb4e29b57c645d16ba7dae0bc57ad1c630752e015ad" name="libreoffice-mailmerge" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a8d7dabe5d02e64faed235d5d5e9bc63ffd8c463651dcfbbff850069b602b280" name="libreoffice-mailmerge" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dc0c4fe9b63e5dd2ca2965912b2dfa4f209647dbe834637b1be4782d6db69d79" name="libreoffice-mailmerge" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="57056f07ef3cb944a462bcd47617c8ce5c7ba7e733b96f1b813a4b4e51c669eb" name="libreoffice-mailmerge" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="80a5fdeeb39b21dca9502eeb8e1632ed14e08dd3a4a1b39a2b036cb458596276" name="libreoffice-mailmerge" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4298717eb5976a6767bf71c7fee7c7d360b8e6db9ac801241117e117e118167f" name="libreoffice-mailmerge" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="889a17195318467e60c89f6312b75a112a4e446a99a6941f163d9c0d823260db" name="libreoffice-math" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1073d37849ce92f84b6509110bc85b7b1075a016f268517a035408c97da6042f" name="libreoffice-math" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="64cc19242e377be7064ab570cde67dc047292710f2cde44f176240da00f678b6" name="libreoffice-math" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dbd9238eea2652e4554ff3422761aea35edbce51afba8a9548a8c8da08381c4c" name="libreoffice-math" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6e6758fd44ad982029b2c30b022f18067dec40799756708e1b27cfb685696a6d" name="libreoffice-math" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b59d9c05b3a991ce252c98c821e54653b55d49d467e7f4e234e35437cdc18a02" name="libreoffice-math" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="081ebf4c78e42e3b022575a2589fd83d1c5a10ab96e591899b60b0c966ba8b8f" name="libreoffice-officebean" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3c345fad3b3eb491238b4fb8c7b7fb8c0ce71c76c030a35b8bb1e6eb4f2fde31" name="libreoffice-officebean" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1bb4040150820d6a4f3bd4dc3631b3a45a5d04b07461839dcba0ec6034e201c8" name="libreoffice-officebean" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="be338d6e4490af0c67714f28d526cc6c009c3ba34e8569e08c235ba0c72a7594" name="libreoffice-officebean" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0a6888f924f804b4420938dfc662a0123224d62e0687698e5276f10eb67b4dfd" name="libreoffice-officebean" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="577e9dfaedf2aa74ac3040bb7a8fad0d20dfddfa5000189394b88eaff7cac0a1" name="libreoffice-officebean" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="45daddf64e924a785f3fe6ae39e2806312689d1fa324fb7efd1e0154172b2919" name="libreoffice-pyuno" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5298e6bc24895cce5e724c9e4a5b1a1525b38aefbbf5bfe23cc27d749a4384a5" name="libreoffice-pyuno" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c315c01ae6f297e756eb8fc5bfbe3b432951619f0d5fc71e88bda86819219abd" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="66d85a18418f995a41b67f524aa1b51326c2dd4d7db1ebaf6e71cc42c374215a" name="libreoffice-pyuno" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e3b9b57a0477fec08fce9f42d6d0d8b46db0352cf3e13dc251a39b099fd277fa" name="libreoffice-pyuno" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="13bdd7788d487bfe5cca517f182fdc3482bf68f00265356e57015457e6b49804" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c08e8fe5fcc1fc57f9682c540d6b37fe5405d5f229047d797cee02759e712941" name="libreoffice-qt5" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="acefb221958d2adf179296bd02bee016cd1a10ea7bd61f4ee2ba3181cfbfb96a" name="libreoffice-qt5" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bc745c689d0e764a67e1f189c86234afa0b88b0322e700bd1dd132ef7c965c6b" name="libreoffice-qt5" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="49cbac01a1dc5cf1d701ac311e21c763b2d1c3c760830da10d5a598ce3e963e2" name="libreoffice-qt5" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3de8e22241e35f741b10cd52add2c1e7acf326a7b3e8b2c2743ec71e97a97cfb" name="libreoffice-qt5" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="581d495e6fc50ede8fcc057ab1aeea37d2eac7b26de0a765688d52c6e25ca7cb" name="libreoffice-qt5" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4be351d09540e94353f41d3b1e8718e5bb4c542a158f9385f5edf6fe018872a3" name="libreoffice-sdk" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4462594f90cc6f2e0009eb46d5b6c90fc28d19ef7dab9571850bc3246929ad0c" name="libreoffice-sdk" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5ffab3ca3786463e501a54cb69b88489972e88e9fc14e1c2398b414c6c48a697" name="libreoffice-sdk" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3f1702daedd35c9d2b55b656da205bea19b2afad32eb0e772a2b23158b231de0" name="libreoffice-sdk" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="14f6d1eaf6d2fbc01545a2f791f7bf80e10d8c33ecf3b2d6724f8202390e8c02" name="libreoffice-sdk" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3eaedbb22d6036c0303a5991bf3d8c2f7e89314f72a8e273f73bd4cc17958523" name="libreoffice-sdk" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ccbb33f9879ffb34849fd35cf66aa11a8af07d39553792c7e5c97c80d4f8bd17" name="libreoffice-sdk-doc" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d9d2ee018ffe5514feebac80a02ee9cfef4448184edccffc7b04d6ab0c360f55" name="libreoffice-sdk-doc" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6016ab319f69aef819ba875535f5fd688db4b8b6d007178243d5514f8436a5bd" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7b30ce5a5851e1757edfba86e289d824a472c6f593059618a0cb0a83c93fea46" name="libreoffice-sdk-doc" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f5b9997398252b1b6c89e2eeeb7b1a3d4012a0c1517d0233ba65bdaa87778b7b" name="libreoffice-sdk-doc" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8bd58416b8d31b8263f23911b3f32c1c49488ccdb26012f13abeb179992084b3" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c3d9422dde9ddc0053938b22849c51b442344aae44c3115cdb803c84290d1fd6" name="libreoffice-writer" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d164a294e9255ee9a0ab1f100a94fcd4ecf24c177397aeeafa6e5ab343fdcfda" name="libreoffice-writer" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="00768fa3b82436ace4744344392650db36677c7e1f89026df4625921be0916a3" name="libreoffice-writer" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="de7c13269d7b7e4272cdb71f004419a51b4b168e4c1b6714764341eec244c129" name="libreoffice-writer" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2b9586933c3dee846a3894f0990f0bd1d71aa2c56d9fdee713aabfca20507b98" name="libreoffice-writer" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d93e15437f8364e6ba57588beed43dfb29cfe639f493fb4a1ac753f2ed53167e" name="libreoffice-writer" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3e7ca8e8589c6f1e54302202b95f32a0c6cd0e6f6fdc83f9de1496879c7ab75f" name="libreoffice-writer-extensions" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="28734643dce03111c24fbd2cd1d1e485b70cf10ba8597268877799598b287949" name="libreoffice-writer-extensions" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3bc46b069f2e23119d88f036af3bf9da76ee180ab04e71bb3cb6de9e59292046" name="libreoffice-writer-extensions" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5f811b41636e4ddead48fbdb2616eaa8a9b7326ca6ccd7daf88210d61b95b18e" name="libreoffice-writer-extensions" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8df599f5fac6db0c332669881018eaf25829a8047bed8678abf23a5046c7279c" name="libreoffice-writer-extensions" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ed089d98db0cba0d6fba1a9445522d6600599022c15ed3b8d87652fa67d48908" name="libreoffice-writer-extensions" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="92b05ff9e025569d4b49f9a90bb52aa4ba54dbcdf07b18cc0f00c65547dd77a2" name="libreofficekit" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ea5cecb2d9f17d191375811a847211bde08cbbc858137809e62073037d4c6ede" name="libreofficekit" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7d1b877259771a87ec791a7d85be4a9965f33e3b74a5aaa52591e037946557d4" name="libreofficekit" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="299f1c4cd279336321bf2f448aad04cd985503e87c65d7a957de8caa7b1bfbfd" name="libreofficekit" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="21cb4854c94cda23396d4eb0bf914a10cbcacbde7840f03b7f3b7fc1ba13707f" name="libreofficekit" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="96d20811ce6c90ce2ee02da767ceeb25d7fa633058239e39d09d993a842d26c9" name="libreofficekit" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f29e484a26d6c6fbb040b81e23283fc0f7ffbdd2008f17b77f3b5e10c935c52a" name="libreofficekit-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="929b35a1e9623f96d36703295609348b946e2b6644419360ce1122db37747b32" name="libreofficekit-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f24726812612876e2b3056d72336b9e0f4a9e2299d10dbee234faa355c6773d5" name="libreofficekit-devel" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="14.22.6.1"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c10e1bce05c2f4f913b423a7591005cf9abcdeb4a6d92015741dd048c31ae499" name="libreofficekit-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5b32f1d7f12097dbaa1226461d9d94f2805fc28755113d2533f8f34e29ce8179" name="libreofficekit-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="84d0dc96b889a0a2503b98401934e5345a084c3c0a0199716bd53cefcf7bae72" name="libreofficekit-devel" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="4.5.3"/>
  <changelog author="andras.timar@collabora.com" date="1610625600">- Fix bsc#1179025 - LO-L3: LibreOffice crashes opening a PPTX
  * bsc1179025.diff</changelog>
  <changelog author="yfjiang@suse.com" date="1611230400">- Update SUSE.soc to reflect current SUSE branding, add following
  colors (bsc#1181122):
  * SUSE Mint
  * SUSE Midnight Blue
  * SUSE Waterhole Blue
  * SUSE Persimmon
  See also https://brand.suse.com/brand-system/color-palette</changelog>
  <changelog author="andras.timar@collabora.com" date="1611403200">- Update to 7.0.4
  * .4 bugfix release of 7.0 series
- Removed patch:
  * icu68.patch
    + integrated upstream</changelog>
  <changelog author="andras.timar@collabora.com" date="1611835200">- Fix bsc#1177955 - LO-L3: SmartArt: text wrongly aligned, background boxes not quite right,...
  * bsc1177955.diff</changelog>
  <changelog author="mmachova@suse.com" date="1612180800">- Update to 7.1.0.3 (bsc#1176198, bsc#1176197, bsc#1175552)
  * RC3 7.1 series
- Update bundled dependencies
- New patch use-comphelper.patch to fix build
- Rebased patch bsc1177955.diff
- Dropped merged patches:
  * 0001-Upgrade-liborcus-to-0.16.0.patch
  * bsc1178944.diff
  * bsc1178943.diff
  * bsc1178807.diff
  * bsc1179025.diff</changelog>
  <changelog author="mmachova@suse.com" date="1613131200">- Adjust to new Box2D and enable KDE on SLE15SP3 or newer</changelog>
  <changelog author="andras.timar@collabora.com" date="1613736000">- Fix bsc#1174465 - LO-L3: Impress in TW (7.0.0.0-beta2) messes up bullet points
  * bsc1174465.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1614340800">- Fix bsc#1181644 - LO-L3: Text changes are reproducibly lost (PPTX, SmartArt)
  * bsc1181644.diff</changelog>
  <changelog author="mmachova@suse.com" date="1614600000">- Update to 7.1.1.2 (fixes bsc#1182790)
  * 7.1.1 final release
- Drop merged patch bsc1177955.diff
- Fix bsc#1176547 - Image shown with different aspect ratio
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="tomas.chvatal@gmail.com" date="1616673600">- Version update to 7.1.2.2:
  * 7.1.2 final release
- Drop merged patches:
  * bsc1174465.diff
  * bsc1181644.diff
  * bsc1176547_1.diff
  * bsc1176547_2.diff</changelog>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="086b816921e9bf01f60127def8a5d55480fceda0eca7b47cee2a43f83902d328" name="librgw-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="025ba141a02d768ca313d86ebff4d14c78a46775db6cb409c50fda208201fa84" name="librgw-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0fa8be49fe048ca67429b0d597756ebcb266633baf883e363650bb60ccd00f78" name="librgw-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="491a1ddfb05909a8813d71d8b4552e4864aefa012702632be075af7c4d4e8a02" name="librgw-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b63eca3f19f2f47dfdc8377afe5b8e63678de854c5f08545946dd8a8dfd8bde2" name="librgw-devel" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="60778d0a701cbb68c0c2d424f9dbab4a8f33292dcb8c93c79d1fa64ecad40e8d" name="librgw-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="c68cc481d548ae56a9a1835e75f8c51b9c8b2a87ecec10cc0d51cc12d09c60b5" name="librgw-devel" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="1f68e9a247be43782032e34888fb12e80168a06a208a9dc8d86641a4d0689427" name="librgw-devel" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="fc985e2ea92a9a6f702aa3d55fcf12bac3d2d0d7c47305afbf3ed8f3b1719ead" name="librgw2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="eda4f82b081a4081be861cc7c61f4b2b6a4d3710112046933c0a89c5d14f2c9b" name="librgw2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d5670ae1d6c69c159db755c5e5101825a26fc80efb5a2e495425b71710121bfa" name="librgw2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ff0e4096cfa42c92b14e5fbf4b1a97f8d7dd49cb98d1b2d8a9db6bbdf772d223" name="librgw2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="ncutler@suse.com" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3c20e682b3deb9282a33dccede7483c3b6ff8877699f1635fed2e1e2011e5e2c" name="librgw2" arch="aarch64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="94d230688b125cc2f82c4367ad840477ace28dd61631dddb12934e4773b3deda" name="librgw2" arch="ppc64le">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="1f0d18c47c50ceaa54b9720e407cdc1056e1936252902c3884188d26edd1bdfa" name="librgw2" arch="s390x">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="54b2d79660c0cfc22be47cb7db9eba523c93dff3d9758739d904921a2be49b12" name="librgw2" arch="x86_64">
  <version epoch="0" ver="15.2.13.79+g51835b62d61" rel="3.28.1"/>
  <changelog author="ncutler@suse.com" date="1602072000">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="ncutler@suse.com" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="ncutler@suse.com" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="ncutler@suse.com" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="ncutler@suse.com" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="ncutler@suse.com" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="ncutler@suse.com" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="ncutler@suse.com" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
</package>
<package pkgid="c881c6e32fb82604e473872debff32d12a115a97d29b48f3ee7297c959d010a7" name="libsbc1" arch="aarch64">
  <version epoch="0" ver="1.3" rel="3.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1345809600">- initial package, version 1.0</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415361600">- Provide baselibs.conf
- Update to version 1.3:
  * Fix issue with frame length calculation for dual-channel mode.
- Changes since 1.2:
  * Add support for setup from A2DP configuration data.
  * Add support for enabling high precision build.
- Changes since 1.1:
  * Add support for mSBC encoding and decoding functionality.</changelog>
</package>
<package pkgid="0f93bd6f21eabc55b5a90075f4bc06098d86bb3183f8120ddc926838327d271e" name="libsbc1" arch="ppc64le">
  <version epoch="0" ver="1.3" rel="3.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1345809600">- initial package, version 1.0</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415361600">- Provide baselibs.conf
- Update to version 1.3:
  * Fix issue with frame length calculation for dual-channel mode.
- Changes since 1.2:
  * Add support for setup from A2DP configuration data.
  * Add support for enabling high precision build.
- Changes since 1.1:
  * Add support for mSBC encoding and decoding functionality.</changelog>
</package>
<package pkgid="684622b20a5411a1c6c394986ac5fffce4f33f8afdb299a351c7fb01507a5e2d" name="libsbc1" arch="s390x">
  <version epoch="0" ver="1.3" rel="3.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1345809600">- initial package, version 1.0</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415361600">- Provide baselibs.conf
- Update to version 1.3:
  * Fix issue with frame length calculation for dual-channel mode.
- Changes since 1.2:
  * Add support for setup from A2DP configuration data.
  * Add support for enabling high precision build.
- Changes since 1.1:
  * Add support for mSBC encoding and decoding functionality.</changelog>
</package>
<package pkgid="9b4656749c7d6251c665ac8a8762c62db6aa8b06278363a437317313bb26a70f" name="libsbc1" arch="x86_64">
  <version epoch="0" ver="1.3" rel="3.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1345809600">- initial package, version 1.0</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415361600">- Provide baselibs.conf
- Update to version 1.3:
  * Fix issue with frame length calculation for dual-channel mode.
- Changes since 1.2:
  * Add support for setup from A2DP configuration data.
  * Add support for enabling high precision build.
- Changes since 1.1:
  * Add support for mSBC encoding and decoding functionality.</changelog>
</package>
<package pkgid="a609d1ec1db2ef56cd96f11d180f32a3fe66684235dbd1c05b7860a51acf0627" name="libsbc1-32bit" arch="x86_64">
  <version epoch="0" ver="1.3" rel="3.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1345809600">- initial package, version 1.0</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415361600">- Provide baselibs.conf
- Update to version 1.3:
  * Fix issue with frame length calculation for dual-channel mode.
- Changes since 1.2:
  * Add support for setup from A2DP configuration data.
  * Add support for enabling high precision build.
- Changes since 1.1:
  * Add support for mSBC encoding and decoding functionality.</changelog>
</package>
<package pkgid="f853b896ccb1deec21b0a321474172258240474be6846ebd5432ec66d0e25071" name="libsnappy1" arch="aarch64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="5451465f5bea0e6ee14dfc887fba490ea7e6a0c20b80e1cca7eb10c222c22472" name="libsnappy1" arch="ppc64le">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="771a20beb491d1a6d338ebe1c4bae3762d871625e23183c54d0642ddaf3595f1" name="libsnappy1" arch="s390x">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="302408ddea335b038dd9f19eedac9881699e6c720d2a329d597450cee1e08c1c" name="libsnappy1" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="ed44b262cc8f18353c4481791725801bc44673a2d8d0e6671fd98fe78ca5659c" name="libsnappy1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="dd2293ef2372646d1ae30afb70918b22b354264941f4e7495b899f1ea1924cb2" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="40e297b326a15a4b42bcd753a32fdf928a8afb8d942f966e9d5315b9eca2a941" name="libsoftokn3" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="79daeb565222001b47b41db4a0a8c9cc07118658f235953b246915929cb92be2" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="01eaa6ed0e9f079295c99a37c7f94f7aebd536f5320b75bc7d75449acfb3a91e" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="2235566483faf658aa53c2a70829a324ab81f625408a4c8f98523610e6acb412" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="991811ca81ee7027f229e9caedb32c3b66d17c6d399a69a8ede7d1469438d251" name="libsoftokn3-hmac" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="347ea319adf6724738d4b26958d0b7cb8a75a4de6797da0e2c47335065df072f" name="libsoftokn3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="37bb4211c9975ed20ecb94c242fdacc29d9ffe962c6787548caf40cca721c52a" name="libsoftokn3-hmac" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="61d2dd09ae513b211651dbc6f829e6f1112b13593df6a998e75d91d5b043792d" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ba01a80b7d65505b111219bc5d630c21ec5cd570aff535d499e5f1b2e557cf54" name="libsoftokn3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="cgrobertson@suse.com" date="1548936000">- update to NSS 3.41.1
  * (3.41) required by Firefox 65.0
  New functionality
  * Implemented EKU handling for IPsec IKE. (bmo#1252891)
  * Enable half-closed states for TLS. (bmo#1423043)
  * Enabled the following ciphersuites by default: (bmo#1493215)
    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
    TLS_RSA_WITH_AES_256_GCM_SHA384
  Notable changes
  * The following CA certificates were added:
    CN = Certigna Root CA
    CN = GTS Root R1
    CN = GTS Root R2
    CN = GTS Root R3
    CN = GTS Root R4
    CN = UCA Global G2 Root
    CN = UCA Extended Validation Root
  * The following CA certificates were removed:
    CN = AC Raíz Certicámara S.A.
    CN = Certplus Root CA G1
    CN = Certplus Root CA G2
    CN = OpenTrust Root CA G1
    CN = OpenTrust Root CA G2
    CN = OpenTrust Root CA G3
  Bugs fixed
  * Reject empty supported_signature_algorithms in Certificate
    Request in TLS 1.2 (bmo#1412829)
  * Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
    (CVE-2018-12404)
  * Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
  * Set session_id for external resumption tokens (bmo#1493769)
  * Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
  * Add additional null checks to several CMS functions to fix a rare
    CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
  nss-disable-ocsp-test.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1558699200">- update to NSS 3.44
  * (3.44) required by Firefox 68.0
  New functionality
  * Support XDG basedir specification (bmo#818686)
  * HASH_GetHashOidTagByHashType - convert type HASH_HashType to
    type SECOidTag
  * SSL_SendCertificateRequest - allow server to request
    post-handshake client authentication. To use this both peers
    need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
  Notable changes
  * The following CA certificates were added:
    CN = emSign Root CA - G1
    CN = emSign ECC Root CA - G3
    CN = emSign Root CA - C1
    CN = emSign ECC Root CA - C3
    CN = Hongkong Post Root CA 3
  Bugs fixed:
  * CVE-2018-18508 (bmo#1507135, bmo#1507174)
    Add additional null checks to several CMS functions to fix a
    rare CMS crash.
  * Improve Gyp build system handling (bmo#1528669, bmo#1529308)
  * Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
  * A fix for Solaris where Firefox 60 core dumps during start when
    using profile from version 52 (bmo#1513913)
  * Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
  * If Docker isn't installed, try running a local clang-format as a
    fallback (bmo#1530134)
  * Enable FIPS mode automatically if the system FIPS mode flag is
    set (bmo#1531267)
  * Add a -J option to the strsclnt command to specify
    sigschemes (bmo#1528262)
  * Add manual for nss-policy-check (bmo#1513909)
  * Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
  * Properly handle ESNI with HRR (bmo#1517714)
  * Expose HKDF-Expand-Label with mechanism (bmo#1529813)
  * Align TLS 1.3 HKDF trace levels (bmo#1535122)
  * Use getentropy on compatible versions of FreeBSD. (bmo#1530102)</changelog>
  <changelog author="cgrobertson@suse.com" date="1561723200">- update to NSS 3.44.1
  * (3.44.1) now required by Firefox 68.0
  New Functionality:
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Many new FIPS test cases (Note: This has increased the source
    archive by approximately 50 megabytes for this release.)
  Bugs fixed:
  * Optimize away unneeded loop in mpi.c (bmo#1554336)
  * More thorough input checking (bmo#1515342)
  * Don't unnecessarily strip leading 0's from key material during
    PKCS11 import (bmo#1540541)
  * Add a SSLKEYLOGFILE enable/disable flag at build.sh
    (bmo#1515236)
  * Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
    (bmo#1473806)
  * Updates to testing for FIPS validation (bmo#1546477)
  * Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
    (bmo#1552208)
  * Unbreak build on GCC &lt; 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to NSS 3.45 (bsc#1141322)
  * New function in pk11pub.h: PK11_FindRawCertsWithSubject
  * The following CA certificates were Removed:
    CN = Certinomis - Root CA (bmo#1552374)
  * Implement Delegated Credentials (draft-ietf-tls-subcerts)
    (bmo#1540403)
    This adds a new experimental function SSL_DelegateCredential
    Note: In 3.45, selfserv does not yet support delegated
    credentials (See bmo#1548360).
    Note: In 3.45 the SSLChannelInfo is left unmodified,
    while an upcoming change in 3.46 will set
    SSLChannelInfo.authKeyBits to that of the delegated
    credential for better policy enforcement
    (See bmo#1563078).
  * Replace ARM32 Curve25519 implementation with one from
    fiat-crypto (bmo#1550579)
  * Support static linking on Windows (bmo#1551129)
  * Expose a function PK11_FindRawCertsWithSubject for finding
    certificates with a given subject on a given slot
    (bmo#1552262)
  * Add IPSEC IKE support to softoken (bmo#1546229)
  * Add support for the Elbrus lcc compiler (&lt;=1.23)
    (bmo#1554616)
  * Expose an external clock for SSL (bmo#1543874)
    This adds new experimental functions: SSL_SetTimeFunc,
    SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
    SSL_ReleaseAntiReplayContext.
    The experimental function SSL_InitAntiReplay is removed.
  * Various changes in response to the ongoing FIPS review
    (bmo#1546477)
    Note: The source package size has increased substantially
    due to the new FIPS test vectors. This will likely
    prompt follow-on work, but please accept our
    apologies in the meantime.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to NSS 3.47.1
  * CVE-2019-11745 - EncryptUpdate should use maxout, not block size
    (boo#1158527)
  * Fix a crash that could be caused by client certificates during startup
    (bmo#1590495, bsc#1158527)
  * Fix compile-time warnings from uninitialized variables in a perl script
    (bmo#1589810)
- update to NSS 3.47
  * Support AES HW acceleration on ARMv8 (bmo#1152625)
  * Allow per-socket run-time ordering of the cipher suites presented
    in ClientHello (bmo#1267894)
  * Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM
  * Soft token MAC verification not constant time (bmo#1582343)
  * Remove arbitrary HKDF output limit by allocating space as needed
    (bmo#1577953)
- update to NSS 3.46
  * CVE-2019-17006 - Add length checks for cryptographic primitives
    (bmo#1539788, bsc#1159819)
  * The following CA certificates were Removed:
    expired Class 2 Primary root certificate
    expired UTN-USERFirst-Client root certificate
    expired Deutsche Telekom Root CA 2 root certificate
    Swisscom Root CA 2 root certificate
  * Significant improvements to AES-GCM performance on ARM</changelog>
  <changelog author="hpj@suse.com" date="1584532800">- Added patches related to FIPS certification:
  * nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
    where possible.
  * nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
  * nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
    hash when validating keypair.
  * nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
    on RSA key generation.
  * nss-fips-cavs-keywrap.patch,
    nss-fips-cavs-kas-ffc.patch,
    nss-fips-cavs-kas-ecc.patch,
    nss-fips-cavs-general.patch,
    nss-fips-cavs-dsa-fixes.patch,
    nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
    tests.
  * nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
    can be processed without rekeying.
  * nss-fips-constructor-self-tests.patch: Run self tests on
    library initialization in FIPS mode.
  * nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
    algorithms in FIPS mode (hashes and the SEED cipher).
  * nss-fips-zeroization.patch: Clear various temporary variables
    after use.
  * nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
    PRF.
  * nss-fips-use-strong-random-pool.patch: Preferentially gather
    entropy from /dev/random over /dev/urandom.
  * nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
    consistently with NSS_FIPS environment variable.
  * nss-unit-test-fixes.patch: Fix argument parsing bug in
    lowhashtest.</changelog>
  <changelog author="hpj@suse.com" date="1586174400">- nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
  avoid PR_GetEnvSecure() being called when NSPR is unavailable,
  resulting in an abort (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1586952000">- nss-fips-constructor-self-tests.patch: Always perform nssdbm
  checksumming on softoken load, even if nssdbm itself is not
  loaded.</changelog>
  <changelog author="hpj@suse.com" date="1587124800">- Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
  API mechanisms for performing DSA and ECDSA hash-and-sign
  in a single call, which will be required in future FIPS cycles.</changelog>
  <changelog author="hpj@suse.com" date="1587470400">- Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
  instance of inverted logic due to a boolean being mistaken for
  a SECStatus, which caused key derivation to fail when the caller
  provided a valid subprime.</changelog>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3c29566664d7db02bb51d8297a4727209c3bd2307bc112ce51adeb1c34863203" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="61ff5e9c44e359782ab35cb38fcc2bd0c7aaaedadf9a7aa925d2bbba6823391a" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="c8293683e008f24ec2e0932639e7b7589aabf45c81fc81ca321cbab5a9ed2b09" name="libsolv-demo" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="a36a871500c31e527efb84cb26fd12922012bf26e38d6d83fae5218081037551" name="libsolv-demo" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="d5d62d12c9422df761f5f52d4d5e0a9e8078cc6b6c3c245d06ba3ce407579203" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4fba949980adab0abefc5664f25b7a679736146bfa87519d5982255b00ced585" name="libsolv-devel" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6901ee571a7ab66916de00ea4a162cf071a4c03f796ddc291970328124a4340f" name="libsolv-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="8da25acf74f2cc436bb7dabd93c415b2e8f573a6758fdb0f510a66530fe2aa50" name="libsolv-devel" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="20007c131e1ac63d86041fe5546a9500e7f44a18672d74f70b53125a703c7560" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="612a6d4da39ba240035ccc79412a347938abe8faac7aa7658f106925a33968ac" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6137bd78950c25092d8c6763451327742cc169a1d85877afad0a91e26db8b4ff" name="libsolv-tools" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="0cf09954565168f595e0fa388638370a4136315cef88fe15e15c4677c5d9328c" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="adf99cc08f821289ed095f0f7442261ab71e9c44afec3534dd83988f181434e5" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mliska@suse.cz" date="1562760000">- Add -ffat-lto-objects to $optflags as the package provides
  static libraries
- Remove NO_BRP_STRIP_DEBUG=true as brp-15-strip-debug will
  not strip debug info for archives</changelog>
  <changelog author="mls@suse.de" date="1566993600">- Fix repository priority handling for multiversion packages
- Make code compatible with swig 4.0, remove obj0 instances
- repo2solv: support zchunk compressed data
- bump version to 0.7.6</changelog>
  <changelog author="mls@suse.de" date="1571400000">- fix updating of too many packages in focusbest mode
- fix handling of disabled installed packages in distupgrade
- new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag
- bump version to 0.7.7</changelog>
  <changelog author="mls@suse.de" date="1573560000">- support arch&lt;-&gt;noarch package changes when creating patch
  conflicts from the updateinfo data
- support for SOLVER_BLACKLIST jobs that block the installation
  of matched packages unless they are directly selected by an
  SOLVER_INSTALL job
- libsolv now also parses the patch status in the updateinfo
  parser
- new solvable_matchessolvable() function
- bump version to 0.7.8</changelog>
  <changelog author="mls@suse.de" date="1574337600">- support conda constrains dependencies
- bump version to 0.7.9</changelog>
  <changelog author="mls@suse.de" date="1575979200">- added two new function to make libzypp independent of the rpm
  database format
- bump version to 0.7.10</changelog>
  <changelog author="mls@suse.de" date="1575979201">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4f972c259ddd3baf9a03f7ab5bd34ffb29556702a6496bd7161fe598aefdc9c9" name="libsqlite3-0" arch="aarch64">
  <version epoch="0" ver="3.36.0" rel="3.12.1"/>
  <changelog author="idonmez@suse.com" date="1483444800">- Update to version 3.16.1
  * Fix a bug concerning the use of row values within triggers
    (see ticket 8c9458e7) that was in version 3.15.0.</changelog>
  <changelog author="mpluskal@suse.com" date="1483790400">- Update to version 3.16.2:
  * Fix the REPLACE statement for WITHOUT ROWID tables that lack
    secondary indexes so that it works correctly with triggers and
    foreign keys.
  * Fix the sqlite3_value_text() interface so that it correctly
    translates content generated by zeroblob() into a string of all
    0x00 characters.
  * Fix the bytecode generator to deal with a subquery in the FROM
    clause that is itself a UNION ALL where one side of the UNION
    ALL is a view that contains an ORDER BY.
  * Adjust the sqlite3_column_count() API so it more often returns
    the same values for PRAGMA statements as it did in prior
    releases, to minimize disruption to applications that might be
    using that interface in unexpected ways.</changelog>
  <changelog author="idonmez@suse.com" date="1487073600">- Update to 3.17.0
  * Approximately 25% better performance from the R-Tree extension.
  * Add the SQLITE_DEFAULT_LOOKASIDE compile-time option.
  * Increase the default lookaside size from 512,125 to 1200,100
    as this provides better performance while only adding 56KB of
    extra memory per connection.
  * Use compiler built-ins __builtin_sub_overflow(),
    __builtin_add_overflow(), and __builtin_mul_overflow()
  when available.
  * Added the SQLITE_ENABLE_NULL_TRIM compile-time option, which
    can result in significantly smaller database files for some
    applications, at the risk of being incompatible with older
    versions of SQLite.
  * Change SQLITE_DEFAULT_PCACHE_INITSZ from 100 to 20, for
    improved performance.
  * Added the SQLITE_UINT64_TYPE compile-time option as an analog
    to SQLITE_INT64_TYPE.
  * Perform some UPDATE operations in a single pass instead of in
    two passes.
  * Enhance the session extension to support WITHOUT ROWID tables.
  * Fixed performance problems and potential stack overflows when
    creating views from multi-row VALUES clauses with hundreds of
    thousands of rows.
  * Added the sha1.c extension.
  * In the command-line shell, enhance the ".mode" command so that
    it restores the default column and row separators for modes
    "line", "list", "column", and "tcl".
  * Enhance the SQLITE_DIRECT_OVERFLOW_READ option so that it
    works in WAL mode as long as the pages being read are not
    in the WAL file.
  * Enhance the LEMON parser generator so that it can store the
    parser object as a stack variable rather than allocating space
    from the heap and make use of that enhancement in the amalgamation.
  * Other performance improvements. Uses about 6.5% fewer CPU cycles.
  * Throw an error if the ON clause of a LEFT JOIN references
    tables to the right of the ON clause. This is the same behavior
    as PostgreSQL. Formerly, SQLite silently converted the LEFT JOIN
    into an INNER JOIN. Fix for ticket 25e335f802dd.
  * Use the correct affinity for columns of automatic indexes.
    Ticket 7ffd1ca1d2ad4ec.
  * Ensure that the sqlite3_blob_reopen() interface can correctly
    handle short rows. Fix for ticket e6e962d6b0f06f46e.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop update-desktop-files BuildRequires: this package contains no
  desktop files, hence there is no need to handle any of them.</changelog>
  <changelog author="idonmez@suse.com" date="1490961600">- Update to 3.18.0
  * Added the PRAGMA optimize command
  * The SQLite version identifier returned by the sqlite_source_id()
    SQL function and the sqlite3_sourceid() C API and found in the
    SQLITE_SOURCE_ID macro is now a 64-digit SHA3-256 hash instead
    of a 40-digit SHA1 hash.
  * Added the json_patch() SQL function to the JSON1 extension.
  * Enhance the LIKE optimization so that it works for arbitrary
    expressions on the left-hand side as long as the LIKE pattern
    on the right-hand side does not begin with a digit or minus sign.
  * Added the sqlite3_set_last_insert_rowid() interface and use the
    new interface in the FTS3, FTS4, and FTS5 extensions to ensure
    that the sqlite3_last_insert_rowid() interface always returns
    reasonable values.
  * Enhance PRAGMA integrity_check and PRAGMA quick_check so that
    they verify CHECK constraints.
  * Enhance the query plans for joins to detect empty tables early
    and halt without doing unnecessary work.
  * Enhance the sqlite3_mprintf() family of interfaces and the
    printf SQL function to put comma separators at the thousands
    marks for integers, if the "," format modifier is used in
    between the "%" and the "d" (example: "%,d").
  * Added the -DSQLITE_MAX_MEMORY=N compile-time option.
  * Added the .sha3sum dot-command and the .selftest dot-command
    to the command-line shell
  * Begin enforcing SQLITE_LIMIT_VDBE_OP. This can be used,
    for example, to prevent excessively large prepared statements
    in systems that accept SQL queries from untrusted users.
  * Various performance improvements.
  * Ensure that indexed expressions with collating sequences are
    handled correctly. Fix for ticket eb703ba7b50c1a5.
  * Fix a bug in the 'start of ...' modifiers for the date and
    time functions. Ticket 6097cb92745327a1
  * Fix a potential segfault in complex recursive triggers,
    resulting from a bug in the OP_Once opcode introduced as part
    of a performance optimization in version 3.15.0. Ticket 06796225f59c057c
  * In the RBU extension, add extra sync operations to avoid the
    possibility of corruption following a power failure.
  * The sqlite3_trace_v2() output for nested SQL statements should
    always begin with a "--" comment marker.</changelog>
  <changelog author="idonmez@suse.com" date="1495454400">- Update to 3.19.0
  * The SQLITE_READ authorizer callback is invoked once with a
    column name that is an empty string for every table referenced
    in a query from which no columns are extracted.
  * When using an index on an expression, try to use expression
    values already available in the index, rather than loading
    the original columns and recomputing the expression.
  * Enhance the flattening optimization so that it is able to
    flatten views on the right-hand side of a LEFT JOIN.
  * Use replace() instead of char() for escaping newline and
    carriage-return characters embedded in strings in the .dump
    output from the command-line shell.
  * Avoid unnecessary foreign key processing in UPDATE statements
    that do not touch the columns that are constrained by the
    foreign keys.
  * On a DISTINCT query that uses an index, try to skip ahead
    to the next distinct entry using the index rather than
    stepping through rows, when an appropriate index is available.
  * Avoid un